launchpad-reviewers team mailing list archive

[Jürgen Gmach <mp+443435@xxxxxxxxxxxxxxxxxx>]

Jürgen Gmach has proposed merging ~jugmac00/lpci:update-deps into lpci:main.

Commit message:
Update Python dependencies

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)

For more details, see:
https://code.launchpad.net/~jugmac00/lpci/+git/lpcraft/+merge/443435
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of ~jugmac00/lpci:update-deps into lpci:main.

diff --git a/NEWS.rst b/NEWS.rst
index b6e37c7..5258278 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -2,11 +2,14 @@
 Version history
 ===============
 
-0.1.3 (unreleased)
+0.2.0 (unreleased)
 ==================
 
 - Add support for non-LTS devel release, which is currently mantic.
 
+- Update Python dependencies, especially `Cryptography`, see CVE-2023-0286 and
+  CVE-2023-23931.
+
 0.1.2 (2023-05-02)
 ==================
 
diff --git a/lpci/providers/tests/test_buildd.py b/lpci/providers/tests/test_buildd.py
index 47d4ea8..cb6dd58 100644
--- a/lpci/providers/tests/test_buildd.py
+++ b/lpci/providers/tests/test_buildd.py
@@ -2,7 +2,7 @@
 # GNU General Public License version 3 (see the file LICENSE).
 
 import pytest
-from craft_providers.bases.buildd import BuilddBaseAlias
+from craft_providers.bases.ubuntu import BuilddBaseAlias
 from testtools import TestCase
 
 from lpci.providers._buildd import LPCIBuilddBaseConfiguration
diff --git a/requirements.txt b/requirements.txt
index 8a8ca35..9d226a8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile
 #
-certifi==2022.12.7
+certifi==2023.5.7
     # via requests
 cffi==1.15.1
     # via cryptography
@@ -12,21 +12,21 @@ charset-normalizer==3.1.0
     # via requests
 craft-cli==1.2.0
     # via -r requirements.in
-craft-providers==1.8.1
+craft-providers==1.12.0
     # via -r requirements.in
-cryptography==39.0.0
+cryptography==40.0.2
     # via secretstorage
 distro==1.8.0
     # via lazr-restfulclient
-httplib2==0.21.0
+httplib2==0.22.0
     # via
     #   launchpadlib
     #   lazr-restfulclient
 idna==3.4
     # via requests
-importlib-metadata==6.0.0
+importlib-metadata==6.6.0
     # via keyring
-importlib-resources==5.10.2
+importlib-resources==5.12.0
     # via keyring
 jaraco-classes==3.2.3
     # via keyring
@@ -44,17 +44,17 @@ lazr-uri==1.0.6
     # via
     #   launchpadlib
     #   wadllib
-more-itertools==9.0.0
+more-itertools==9.1.0
     # via jaraco-classes
 oauthlib==3.2.2
     # via lazr-restfulclient
-platformdirs==3.1.1
+platformdirs==3.5.1
     # via craft-cli
 pluggy==1.0.0
     # via -r requirements.in
 pycparser==2.21
     # via cffi
-pydantic==1.10.6
+pydantic==1.10.7
     # via
     #   -r requirements.in
     #   craft-cli
@@ -68,7 +68,7 @@ pyyaml==6.0
     #   -r requirements.in
     #   craft-cli
     #   craft-providers
-requests==2.28.2
+requests==2.31.0
     # via requests-unixsocket
 requests-unixsocket==0.3.0
     # via craft-providers
@@ -78,13 +78,15 @@ six==1.16.0
     # via
     #   launchpadlib
     #   lazr-restfulclient
-typing-extensions==4.5.0
+typing-extensions==4.6.0
     # via pydantic
-urllib3==1.26.15
-    # via requests
+urllib3==1.26.16
+    # via
+    #   craft-providers
+    #   requests
 wadllib==1.3.6
     # via lazr-restfulclient
-zipp==3.11.0
+zipp==3.15.0
     # via
     #   importlib-metadata
     #   importlib-resources