Closed jakirkham closed 1 year ago
Currently setuptools version 66.0.0 breaks re-rendering. This will inevitably affect the bot. So pin to an older setuptools to protect against it.
setuptools
66.0.0
Also git fixed some CVEs recently in 2.39.1 ( https://github.com/conda-forge/git-feedstock/pull/127 ). The new package is in conda-forge, but we need a rebuild of the image to get it.
git
2.39.1
Finally add a button on CI to enable kicking off a build of the image manually when needed.
xref: https://github.com/conda-forge/conda-forge-pinning-feedstock/issues/3973
Replacing with PR ( https://github.com/conda-forge/webservices-dispatch-action/pull/27 )
Currently
setuptools
version66.0.0
breaks re-rendering. This will inevitably affect the bot. So pin to an oldersetuptools
to protect against it.Also
git
fixed some CVEs recently in2.39.1
( https://github.com/conda-forge/git-feedstock/pull/127 ). The new package is in conda-forge, but we need a rebuild of the image to get it.Finally add a button on CI to enable kicking off a build of the image manually when needed.
xref: https://github.com/conda-forge/conda-forge-pinning-feedstock/issues/3973