artefactual-labs / umcu-uploader

UMCU Uploader
Apache License 2.0
1 stars 1 forks source link

Fix py7zr vulnerbility. #131

Closed mcantelon closed 1 year ago

mcantelon commented 1 year ago

Updated py7zr in requirements to fix critical vulnerbility and match Poetry version.

Diogenesoftoronto commented 1 year ago

what is interesting is that this isn't a problem in the poetry build. Has archivematica been updated to a version that works with the pything 3.10? If so I believe we should consider deprecating this way of building the project and move to poetry entirely at some point.

mcantelon commented 1 year ago

This wasn't due to a problem with the Poetry build, yeah. As for Archivematica and the storage service's Python version requirements, I'm not sure where there's at. I took a quick look at the documentation and it doesn't seem to say.