Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Python dependencies #66

Merged

Conversation

mcdonnnj
Copy link
Member

@mcdonnnj mcdonnnj commented Mar 3, 2023

🗣 Description

This pull request updates the Python dependencies used by this project. This includes the versions of pip, pipenv, setuptools, and wheel explicitly defined in the Dockerfile as well as the pipenv managed dependencies in src/Pipfile.lock. It also updates the full version of Python in the Pipfile to match the version used in the Docker configuration. Lastly the Python package versions stored in the Dockerfile are broken out into environment variables to improve maintainability.

💭 Motivation and context

Python dependencies should be kept up-to-date as possible.

🧪 Testing

Automated tests pass. I ran the image locally and it was able to scan websites within expectations.

✅ Pre-approval checklist

  • This PR has an informative and human-readable title.
  • Changes are limited to a single goal - eschew scope creep!
  • All relevant type-of-change labels have been added.
  • I have read the CONTRIBUTING document.
  • These code changes follow cisagov code standards.
  • All new and existing tests pass.

mcdonnnj added 3 commits March 2, 2023 16:39
Move the hard-coded Python package versions to environment values to
improve maintainability.
Update the versions of the pip, pipenv, setuptools, and wheel packages
defined in the Dockerfile.
Update the full Python version defined in the Pipfile and update all
dependencies in the lock file by running `pipenv lock` in the `src/`
directory.
@mcdonnnj mcdonnnj added the dependencies Pull requests that update a dependency file label Mar 3, 2023
@mcdonnnj mcdonnnj requested review from dav3r, felddy and jsf9k as code owners March 3, 2023 16:50
@mcdonnnj mcdonnnj self-assigned this Mar 3, 2023
Copy link
Member

@dav3r dav3r left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚙️ 👍

@mcdonnnj mcdonnnj merged commit 6b47733 into improvement/project_updates Mar 3, 2023
@mcdonnnj mcdonnnj deleted the improvement/update_python_dependencies branch March 3, 2023 20:43
@mcdonnnj mcdonnnj mentioned this pull request Mar 6, 2023
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants