Commit graph

74 commits

Author SHA1 Message Date
Sebastien Awwad
34790634ec
DOC: Clarify update instructions for requirements files
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2019-01-08 10:58:17 -05:00
Sebastien Awwad
39e4674e4c
Update deps using pip-compile and manual checking in Python2&3
Also add note about how this is done.

The dev-requirements.txt dependencies that do not appear in
requirements.txt have not been updated.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2019-01-07 11:31:07 -05:00
pyup-bot
e6283ce5ac
Update requests from 2.20.0 to 2.20.1
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-14 10:28:33 -05:00
pyup-bot
7305c1848b
Update pbr from 5.1.0 to 5.1.1
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-14 10:28:25 -05:00
pyup-bot
702d78be7f
Update cryptography from 2.3.1 to 2.4.1
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-14 10:27:38 -05:00
pyup-bot
8e5c2a1567
Update virtualenv from 16.0.0 to 16.1.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:52:13 -05:00
pyup-bot
dde55697a8
Update tox from 3.4.0 to 3.5.3
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:52:08 -05:00
pyup-bot
fd9b225e2a
Update stevedore from 1.29.0 to 1.30.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:52:04 -05:00
pyup-bot
496d3dccb5
Update smmap2 from 2.0.4 to 2.0.5
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:52:00 -05:00
pyup-bot
d8d7e50500
Update requests from 2.19.1 to 2.20.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:42 -05:00
pyup-bot
98a491ef5e
Update py from 1.6.0 to 1.7.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:40 -05:00
pyup-bot
a14ea7c8dc
Update pluggy from 0.7.1 to 0.8.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:36 -05:00
pyup-bot
fa2414c348
Update pbr from 4.2.0 to 5.1.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:32 -05:00
pyup-bot
3f3a90e785
Update ipaddress from 1.0.21 to 1.0.22
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:28 -05:00
pyup-bot
5a7c14ea69
Update gitdb2 from 2.0.4 to 2.0.5
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:51:18 -05:00
pyup-bot
3171f00615
Update colorama from 0.3.9 to 0.4.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-11-05 15:50:58 -05:00
Sebastien Awwad
24a10b5527
Update dependencies and bump version to 0.11.2-alpha
for an alpha release.

Update dependencies:
bandit, py, pycparser, pynacl, securesystemslib, tox

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-10-02 22:24:14 -04:00
Sebastien Awwad
75e126ac96
Test: remove redundant proxy tests and their requirements,
add more explanatory comments in test_proxy.use,
and prepare for rename of proxy2.py to proxy_server.py in next
commit (separate so that the rename can be seen as such).

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-09-25 15:04:08 -04:00
Sebastien Awwad
46b584d8eb
Test: try download.py through via various proxies
- adds inaz2/proxy2.py, copied code.
- adds dev dependency on twisted for a simple proxy test
- adds a new test module, test_proxy_use, and runs those tests only in
Python2.7 (as proxy2 only supports Python2.7) using new logic in
aggregate_tests.py.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-09-21 13:13:45 -04:00
Trishank K Kuppusamy
b9bc8602c2
Update TUF to handle HTTPS proxies
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>
2018-08-31 13:18:35 -04:00
pyup-bot
41e33cf87a
Update cryptography from 2.3 to 2.3.1
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:13:30 -04:00
pyup-bot
c9284a8d99
Update bandit from 1.4.0 to 1.5.0
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:12:29 -04:00
Sebastien Awwad
481692eaa0
Tell pyup to ignore the Python2-conditional dependencies
See comments on PR 778:
https://github.com/theupdateframework/tuf/pull/778

In short, pyup is trying to update dependencies that are active
only when Python2 is being used to versions that no longer
support Python2.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-30 16:07:04 -04:00
Sebastien Awwad
e690e05e2d
Use PEP 508 to make dev-requirements compatible with Python 2 & 3
by specifying the appropriate versions of pylint and astroid
for Python2. pylint and astroid dropped Python2 compatibility
for their latest major revisions, so dev-requirements now pins
the latest compatible revision for Python2 if installing in a
Python2 environment.

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-20 11:44:14 -04:00
pyup-bot
3602d61321
Update dependencies pinned in dev-requirements
Update astroid from 1.6.5 to 2.0.4
Update cryptography from 2.2.2 to 2.3
Update cryptography from 2.2.2 to 2.3
Update gitdb2 from 2.0.3 to 2.0.4
Update gitpython from 2.1.10 to 2.1.11
Update pbr from 4.0.4 to 4.2.0
Update pluggy from 0.6.0 to 0.7.1
Update py from 1.5.3 to 1.5.4
Update pylint from 1.9.2 to 2.1.1
Update pyyaml from 3.12 to 3.13
Update smmap2 from 2.0.3 to 2.0.4
Update stevedore from 1.28.0 to 1.29.0
Update tox from 3.0.0 to 3.2.1

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-08-14 17:18:54 -04:00
Vladimir Diaz
2376ec7562
Update third-party deps in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-06-12 15:50:59 -04:00
Vladimir Diaz
6f3275b0f0
Upgrade SSLib dependency in setup.py (0.11.1 -> 0.11.2)
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-06-04 14:40:29 -04:00
Vladimir Diaz
f32c3466e0
Update gitpython dependency in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-21 12:13:10 -04:00
Vladimir Diaz
c02e479209
Update virtualenv dependency
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-17 11:49:38 -04:00
Vladimir Diaz
1262775600
Upgrade the astroid, pbr, and pylint dependencies in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-05-16 16:14:57 -04:00
Vladimir Diaz
4ddb41154f
Update securesystemslib in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-30 13:39:00 -04:00
Vladimir Diaz
b3c7e9cc1a
Update the pip requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-23 13:40:49 -04:00
Vladimir Diaz
8b40894149
Upgrade dependencies in setup.py and requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-04-11 15:18:13 -04:00
Sebastien Awwad
3aeefd2907
Remove futures from dev-requirements for Python3 compat
pip install -r dev-requirements.txt using Python3 currently
breaks due to futures 3.2.0 not being available for Python3.

dev-requirements.txt was recently flattened (using pip-compile).

This flattening was performed in a Python2 environment.
Dependencies will vary in different environments.

Currently, futures 3.2.0 appears in the dev-requirements file
that pip-compile generated while running in Python2. If you try
installing futures 3.2.0 in a Python3 environment (if you try
`pip install -r dev-requirements.txt` running Python3, in other
words), you will encounter an error. Removing futures from
flattened dev-requirements fixes this.

There are several larger issues here that are not addressed and
must have issues created for them:
 - pip-compile on existing dev-requirements.txt to generate new
   dev-requirements.txt will retain orphaned dependencies,
   accumulating cruft; you need a one-layer (non-flattened)
   dev-dependencies file to use as a source file for pip-compile,
   I think
 - Python2 and Python3 dependencies will frequently vary, so
   it MAY be worth having dev-requirements-python2.txt and
   dev-requirements-python3.txt
 - Perhaps as a result of all this, we should reconsider pinning?

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
2018-04-06 11:44:41 -04:00
Vladimir Diaz
5904e8b85e
Remove hashes from dev-requirements.txt
* Hashes do not work with --editable

Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-29 10:51:09 -04:00
Vladimir Diaz
a052b11c79
Add hashes to dev-requirements.txt (intended for developers)
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-23 10:54:43 -04:00
Vladimir Diaz
0e8a22ffaf
Update the pylint and cryptography dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-20 10:20:01 -04:00
Vladimir Diaz
c273942639
Bump 'cffi' dependency: 1.11.4 -> 1.11.5
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-01 15:44:12 -05:00
Vladimir Diaz
4fa8292c6f
Bump securesystemslib version to 0.10.10 in setup.py and dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-31 16:11:00 -05:00
Vladimir Diaz
a87a9f3106
Upgrade pylint dependency to 1.8.2
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-24 16:25:12 -05:00
Vladimir Diaz
bc9b4b37de
Upgrade cffi and securesystemslib dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-01-22 15:24:00 -05:00
Vladimir Diaz
2949368ad1
Bump the pylint and bandit dependencies
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-22 11:47:44 -05:00
Vladimir Diaz
5276fbb20a
Merge pull request #553 from vladimir-v-diaz/upgrade_pylint
Bump version of pylint to 1.7.5
2017-12-12 13:57:08 -05:00
Vladimir Diaz
076cbfa846
Bump version of pylint to 1.7.5
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-12 13:44:05 -05:00
Vladimir Diaz
f568ef72b8
Use == to correctly set version dependency for 'six' and 'iso8601'
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-11 17:22:02 -05:00
pyup-bot
63b6a757d3
Update pynacl from 1.2.0 to 1.2.1
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-12-04 13:34:17 -05:00
pyup-bot
0196b19c73
Update cryptography from 2.1.3 to 2.1.4
Signed-off-by: Vladimir <vladimir.v.diaz@gmail.com>
2017-11-30 15:50:15 -05:00
Vladimir Diaz
3a972c7bbe
Add Pylint dependency to CI and dev requirement files
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-15 16:29:49 -05:00
Vladimir Diaz
3310cb3d26
Add missing dependencies and update securesystemslib in dev-requirements.txt
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-09 11:18:25 -05:00
pyup-bot
15cbf87f8e
Update cryptography from 2.1.2 to 2.1.3
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2017-11-03 10:17:34 -04:00