Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TFRS - Update and Manage Application Dependencies #2687

Closed
6 tasks
AlexZorkin opened this issue Oct 23, 2023 · 1 comment
Closed
6 tasks

TFRS - Update and Manage Application Dependencies #2687

AlexZorkin opened this issue Oct 23, 2023 · 1 comment

Comments

@AlexZorkin
Copy link
Collaborator

Describe the task
Update and manage dependencies across various parts of the application. This includes updating libraries in the backend for Python and the security scan for Go.

Purpose
To ensure the application remains secure, efficient, and free from vulnerabilities. Regularly updating dependencies is essential for maintaining the health of the system and leveraging improvements or fixes provided by the updated libraries.

Acceptance Criteria

  • Update urllib3 from version 1.26.12 to 1.26.18 in /backend Dependencies python.
  • Address any breaking changes or issues that arise from this update.
  • Update golang.org/x/net from version 0.2.0 to 0.17.0 in /security-scan/scan-coordinator Dependencies go.
  • Ensure there are no conflicts or issues after updating the Go dependency.
  • Update cryptography from version 39.0.1 to 41.0.4 in /backend Dependencies python.
  • Verify application stability and functionality after performing the updates.

Additional context

  • Dependency update tickets such as #2678 and #2633 have been flagged by the dependabot bot and require review.
  • Regularly updating dependencies is essential for security, performance, and accessing new features or fixes.
@AlexZorkin
Copy link
Collaborator Author

merged into ticket #2728

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants