mirror of
https://github.com/NVIDIA-NeMo/DataDesigner
synced 2026-05-24 09:48:29 +00:00
2528741eb2
* fix: bump pytest, aiohttp, and cryptography for security CVEs - pytest 9.0.2 → 9.0.3 (CVE-2025-71176, High — RCE via symlink TOCTOU) - aiohttp 3.13.3 → 3.13.5 (10 Medium CVEs — DoS, CRLF injection, credential theft, request smuggling) - cryptography 46.0.6 → 46.0.7 (CVE-2026-39892, Medium — buffer overflow on Python >3.11) Add constraint-dependencies for transitive deps (aiohttp, cryptography) to enforce minimum safe versions across both workspace and e2e lockfiles. * style: fix indentation in tests_e2e/pyproject.toml Match the 2-space indentation used throughout the file.
45 lines
1.2 KiB
TOML
45 lines
1.2 KiB
TOML
[project]
|
|
name = "data-designer-e2e-tests"
|
|
version = "0.0.1"
|
|
requires-python = ">=3.10"
|
|
|
|
dependencies = [
|
|
"data-designer",
|
|
]
|
|
|
|
[tool.uv.sources]
|
|
data-designer = { path = "../packages/data-designer" }
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"pytest>=9.0.3,<10",
|
|
]
|
|
|
|
[project.entry-points."data_designer.plugins"]
|
|
demo-column-generator = "data_designer_e2e_tests.plugins.column_generator.plugin:column_generator_plugin"
|
|
demo-seed-reader = "data_designer_e2e_tests.plugins.seed_reader.plugin:seed_reader_plugin"
|
|
demo-filesystem-seed-reader = "data_designer_e2e_tests.plugins.filesystem_seed_reader.plugin:filesystem_seed_reader_plugin"
|
|
regex-filter = "data_designer_e2e_tests.plugins.regex_filter.plugin:regex_filter_plugin"
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = ["tests"]
|
|
env = [
|
|
# ensure plugins are enabled
|
|
"DISABLE_DATA_DESIGNER_PLUGINS=false",
|
|
]
|
|
|
|
[tool.uv]
|
|
package = true
|
|
required-version = ">=0.7.10"
|
|
# Minimum versions for transitive dependencies with known security vulnerabilities.
|
|
constraint-dependencies = [
|
|
"aiohttp>=3.13.5",
|
|
"cryptography>=46.0.7",
|
|
]
|
|
|
|
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["src/data_designer_e2e_tests"]
|