Commit graph

57 commits

Author SHA1 Message Date
Sebastien Awwad
75e126ac96
Test: remove redundant proxy tests and their requirements,
add more explanatory comments in test_proxy.use,
and prepare for rename of proxy2.py to proxy_server.py in next
commit (separate so that the rename can be seen as such).

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-09-25 15:04:08 -04:00
Sebastien Awwad
46b584d8eb
Test: try download.py through via various proxies
- adds inaz2/proxy2.py, copied code.
- adds dev dependency on twisted for a simple proxy test
- adds a new test module, test_proxy_use, and runs those tests only in
Python2.7 (as proxy2 only supports Python2.7) using new logic in
aggregate_tests.py.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-09-21 13:13:45 -04:00
Trishank K Kuppusamy
b9bc8602c2
Update TUF to handle HTTPS proxies
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>
2018-08-31 13:18:35 -04:00
pyup-bot
41e33cf87a
Update cryptography from 2.3 to 2.3.1
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:13:30 -04:00
pyup-bot
c9284a8d99
Update bandit from 1.4.0 to 1.5.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:12:29 -04:00
Sebastien Awwad
481692eaa0
Tell pyup to ignore the Python2-conditional dependencies
See comments on PR 778:
https://github.com/theupdateframework/tuf/pull/778

In short, pyup is trying to update dependencies that are active
only when Python2 is being used to versions that no longer
support Python2.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:07:04 -04:00
Sebastien Awwad
e690e05e2d
Use PEP 508 to make dev-requirements compatible with Python 2 & 3
by specifying the appropriate versions of pylint and astroid
for Python2. pylint and astroid dropped Python2 compatibility
for their latest major revisions, so dev-requirements now pins
the latest compatible revision for Python2 if installing in a
Python2 environment.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-20 11:44:14 -04:00
pyup-bot
3602d61321
Update dependencies pinned in dev-requirements
Update astroid from 1.6.5 to 2.0.4
Update cryptography from 2.2.2 to 2.3
Update cryptography from 2.2.2 to 2.3
Update gitdb2 from 2.0.3 to 2.0.4
Update gitpython from 2.1.10 to 2.1.11
Update pbr from 4.0.4 to 4.2.0
Update pluggy from 0.6.0 to 0.7.1
Update py from 1.5.3 to 1.5.4
Update pylint from 1.9.2 to 2.1.1
Update pyyaml from 3.12 to 3.13
Update smmap2 from 2.0.3 to 2.0.4
Update stevedore from 1.28.0 to 1.29.0
Update tox from 3.0.0 to 3.2.1

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-14 17:18:54 -04:00
Vladimir Diaz
2376ec7562
Update third-party deps in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-06-12 15:50:59 -04:00
Vladimir Diaz
6f3275b0f0
Upgrade SSLib dependency in setup.py (0.11.1 -> 0.11.2)
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-06-04 14:40:29 -04:00
Vladimir Diaz
f32c3466e0
Update gitpython dependency in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-21 12:13:10 -04:00
Vladimir Diaz
c02e479209
Update virtualenv dependency
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-17 11:49:38 -04:00
Vladimir Diaz
1262775600
Upgrade the astroid, pbr, and pylint dependencies in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-16 16:14:57 -04:00
Vladimir Diaz
4ddb41154f
Update securesystemslib in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-30 13:39:00 -04:00
Vladimir Diaz
b3c7e9cc1a
Update the pip requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-23 13:40:49 -04:00
Vladimir Diaz
8b40894149
Upgrade dependencies in setup.py and requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-11 15:18:13 -04:00
Sebastien Awwad
3aeefd2907
Remove futures from dev-requirements for Python3 compat
pip install -r dev-requirements.txt using Python3 currently
breaks due to futures 3.2.0 not being available for Python3.

dev-requirements.txt was recently flattened (using pip-compile).

This flattening was performed in a Python2 environment.
Dependencies will vary in different environments.

Currently, futures 3.2.0 appears in the dev-requirements file
that pip-compile generated while running in Python2. If you try
installing futures 3.2.0 in a Python3 environment (if you try
`pip install -r dev-requirements.txt` running Python3, in other
words), you will encounter an error. Removing futures from
flattened dev-requirements fixes this.

There are several larger issues here that are not addressed and
must have issues created for them:
 - pip-compile on existing dev-requirements.txt to generate new
   dev-requirements.txt will retain orphaned dependencies,
   accumulating cruft; you need a one-layer (non-flattened)
   dev-dependencies file to use as a source file for pip-compile,
   I think
 - Python2 and Python3 dependencies will frequently vary, so
   it MAY be worth having dev-requirements-python2.txt and
   dev-requirements-python3.txt
 - Perhaps as a result of all this, we should reconsider pinning?

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-04-06 11:44:41 -04:00
Vladimir Diaz
5904e8b85e
Remove hashes from dev-requirements.txt
* Hashes do not work with --editable

Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-29 10:51:09 -04:00
Vladimir Diaz
a052b11c79
Add hashes to dev-requirements.txt (intended for developers)
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-23 10:54:43 -04:00
Vladimir Diaz
0e8a22ffaf
Update the pylint and cryptography dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-20 10:20:01 -04:00
Vladimir Diaz
c273942639
Bump 'cffi' dependency: 1.11.4 -> 1.11.5
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-01 15:44:12 -05:00
Vladimir Diaz
4fa8292c6f
Bump securesystemslib version to 0.10.10 in setup.py and dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-31 16:11:00 -05:00
Vladimir Diaz
a87a9f3106
Upgrade pylint dependency to 1.8.2
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-24 16:25:12 -05:00
Vladimir Diaz
bc9b4b37de
Upgrade cffi and securesystemslib dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-22 15:24:00 -05:00
Vladimir Diaz
2949368ad1
Bump the pylint and bandit dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-22 11:47:44 -05:00
Vladimir Diaz
5276fbb20a
Merge pull request #553 from vladimir-v-diaz/upgrade_pylint
Bump version of pylint to 1.7.5
2017-12-12 13:57:08 -05:00
Vladimir Diaz
076cbfa846
Bump version of pylint to 1.7.5
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-12 13:44:05 -05:00
Vladimir Diaz
f568ef72b8
Use == to correctly set version dependency for 'six' and 'iso8601'
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-11 17:22:02 -05:00
pyup-bot
63b6a757d3
Update pynacl from 1.2.0 to 1.2.1
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-04 13:34:17 -05:00
pyup-bot
0196b19c73
Update cryptography from 2.1.3 to 2.1.4
Signed-off-by: Vladimir <vladimir.v.diaz@gmail.com>
2017-11-30 15:50:15 -05:00
Vladimir Diaz
3a972c7bbe
Add Pylint dependency to CI and dev requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-15 16:29:49 -05:00
Vladimir Diaz
3310cb3d26
Add missing dependencies and update securesystemslib in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-09 11:18:25 -05:00
pyup-bot
15cbf87f8e
Update cryptography from 2.1.2 to 2.1.3
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-03 10:17:34 -04:00
pyup-bot
473c01a5d9
Update pynacl from 1.1.2 to 1.2.0
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-02 15:35:14 -04:00
pyup-bot
108e863861 Update cryptography from 2.1.1 to 2.1.2 2017-10-25 08:38:05 -04:00
pyup-bot
459b55017c Pin tox to latest version 2.9.1 2017-10-13 11:17:56 -04:00
pyup-bot
03f06004e3 Update cryptography from 2.0.3 to 2.1.1 2017-10-13 11:17:55 -04:00
pyup-bot
1fd4f40301 Update pynacl from 1.0.1 to 1.1.2 2017-10-13 11:17:53 -04:00
pyup-bot
bccdcb5b38 Update cffi from 1.7.0 to 1.11.2 2017-10-13 11:17:52 -04:00
Vladimir Diaz
02ddfb02f5
Remove PyCrypto dependency
Our crypto library dropped multi-library support and no longer uses PyCrypto.
2017-10-13 10:44:39 -04:00
Vladimir Diaz
6340aafbb4
Upgrade pyca/cryptography 2017-09-22 11:18:51 -04:00
Vladimir Diaz
fa22ea1a59
Use v0.10.7 of securesystemslib
v0.10.7 implements TAP 9
2017-08-23 15:08:44 -04:00
Vladimir Diaz
32aab8f5fb
Use securesystemslib v0.10.6
that contains bug fix for _get_keyid()
2017-07-17 17:04:35 -04:00
Vladimir Diaz
7720b74cba Remove crypto dependencies, which are now handles by securesystemslib 2017-01-13 10:26:47 -05:00
Vladimir Diaz
cb2b4ac83b Remove 'simple-settings' requirement and add 'securesystemslib' 2017-01-12 16:31:47 -05:00
Artiom Baloian
b793c81739 Added simple_settings, now it is a requirement of TuF.
Rename conf.py into the settings.py an changed import call.
2016-11-01 15:38:40 -04:00
Vladimir Diaz
8faf32ef37 Update dev-requirements.txt 2016-08-08 11:29:21 -04:00
Vladimir Diaz
ef2ab091db Bump cryptography to 1.0 in dev-requirements.txt 2015-08-31 15:56:47 -04:00
Vladimir Diaz
b2132e3c72 Support enryption + decryption with pyca/cryptography 2015-07-30 10:19:44 -04:00
Vladimir Diaz
70a3510afc Minor updates to requirement files. 2014-06-10 08:28:29 -04:00