Skip to content

update python 3.13, mongo 7, urllib, requests, werkzeug across docker and project#868

Merged
fmigneault merged 8 commits intomasterfrom
security-updates
Dec 17, 2025
Merged

update python 3.13, mongo 7, urllib, requests, werkzeug across docker and project#868
fmigneault merged 8 commits intomasterfrom
security-updates

Conversation

@fmigneault
Copy link
Copy Markdown
Collaborator

@fmigneault fmigneault commented Dec 12, 2025

@fmigneault fmigneault self-assigned this Dec 12, 2025
@github-actions github-actions Bot added ci/operations Related to CI operations (actions, execution, install, builds, etc.) ci/doc Issue related to documentation of the package labels Dec 12, 2025
@codecov
Copy link
Copy Markdown

codecov Bot commented Dec 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.92%. Comparing base (cba028a) to head (9c3fb9d).
⚠️ Report is 123 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #868   +/-   ##
=======================================
  Coverage   87.92%   87.92%           
=======================================
  Files          82       82           
  Lines       19272    19272           
  Branches     2484     2484           
=======================================
  Hits        16945    16945           
  Misses       1681     1681           
  Partials      646      646           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@fmigneault fmigneault merged commit 6103704 into master Dec 17, 2025
54 of 62 checks passed
@fmigneault fmigneault deleted the security-updates branch December 17, 2025 06:00
fmigneault added a commit to bird-house/birdhouse-deploy that referenced this pull request Feb 17, 2026
…OL Python and http-related libraires (#622)

## Overview

Update multiple components with corresponding updates of `urllib`,
`requests`, etc.
At the same time, bump to Python 3.13 versions as applicable.

## Changes

**Non-breaking changes**
- STAC API: Security update, minor OpenAPI version reporting fixes, and
`stac-fastapi`/`starlette` compatibility fix using
[2.3.0](https://github.com/crim-ca/stac-app/releases/tag/2.3.0)
   - relates to crim-ca/stac-app#65
   - relates to crim-ca/stac-app#69
   - relates to crim-ca/stac-app#74

- Cowbird: Security update to version
[2.6.0](https://github.com/Ouranosinc/cowbird/releases/tag/2.6.0)
  - relates to Ouranosinc/cowbird#98

- Magpie: Security update to version
[4.3.0](https://github.com/Ouranosinc/Magpie/releases/tag/4.3.0)
  - relates to Ouranosinc/Magpie#640
  - relates to Ouranosinc/Magpie#642

- Twitcher: Security update to version
[0.11.0](https://github.com/bird-house/twitcher/releases/tag/v0.11.0)
  - relates to bird-house/twitcher#143
  - relates to bird-house/twitcher#145
  - relates to bird-house/twitcher#146
  - relates to bird-house/twitcher#148

- Weaver: Security and dependency fix update using version
[6.8.3](https://github.com/crim-ca/weaver/releases/tag/6.8.3)
  - relates to crim-ca/weaver#868
  - relates to crim-ca/weaver#869
  - relates to crim-ca/weaver#877
  - relates to crim-ca/weaver#881

- Weaver: Update `post-docker-compose-up` script.
  - Handle multiple Magpie cookies in response.
This can happen depending on specific internal HTTP libraries versions
of the services.
To retain backward/forward compatibility, all cookies returned from
Magpie are chained in following `curl` commands.
- Use birdhouse `log` utility to report operations produced by the
script rather than custom "echo level".

- Weaver: Job Result Proxy Buffers
- The *Job Results* responses of `weaver` can return a lot of `Link`
headers. This is done to provide job metadata
references and provenance traceability details, but also for actual
results locations that can vary in quantity
    depending on the actual process execution.
Therefore, the Ngnix `proxy_buffer_size` and `proxy_buffers` directives
of the `proxy` service must be added with
sufficiently large values to avoid HTTP 502 errors when the response
headers exceed the default buffer sizes.
The `WEAVER_PROXY_RESPONSE_BUFFER_SIZE` and
`WEAVER_PROXY_RESPONSE_BUFFER_COUNT` variables are added to allow
further customization as needed by the server. Their defaults are
reasonable values to meet minimal requirements
    by `weaver`'s metadata `Link` and a few result outputs.

- Birdhouse: Allow `log <LEVEL> -n ...` and `log <LEVEL> -p ...` to
generate log outputs without newline/prefixes.

These options allow writing multiple log entries onto the same line for
correct visual rendering of distinct `log`
calls separated to allow some intermediate logic. The `log` function
invocations with these options respect the
log levels in order to make the messages consistent with enabled
redirections and verbosity.

**Breaking changes**
- n/a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/doc Issue related to documentation of the package ci/operations Related to CI operations (actions, execution, install, builds, etc.)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant