aboutsummaryrefslogtreecommitdiffstats
path: root/Changelog.md
diff options
context:
space:
mode:
authorAlexander Mazuruk <a.mazuruk@samsung.com>2021-02-18 17:24:44 +0100
committerAlexander Mazuruk <a.mazuruk@samsung.com>2021-05-11 01:27:00 +0200
commite22e10e5aa858fe36db2580e072e5b53957117e9 (patch)
tree1560e4dc52ecf9835b34a10bc1f4415b68b2934f /Changelog.md
parent031694bad1802a75918b9b97d5c34faac729f0c6 (diff)
Change python baseOS img to integration-python2.2.0
Moved setting PYTHONPATH and PATH to Dockerfile as thats where python version is defined (baseOS image) Switched hardcoded python3.8 to python3. psycopg is recommended to be built from source for production use, yet CI environment does not have the dependencies to build it. To circumvent that, requirements were split into: - requirements-common.txt that should be included for each environment - requirements-docker.txt that force building of psycopg in docker - requirements.txt that use psycopg-binary for ci purposes Benefits from switching over: * minimal {java11,python} images maintained by integration team * using currently "blessed by seccom" versions (:latest tag used) * should limit spread of legal issues across layers * integration images will be the first to have automated compliance documentation * should limit spread of base layers (contributing to deployment footprint - more base layers = more to download, more to store etc...) Issue-ID: INT-1864 Issue-ID: DCAEGEN2-2420 Signed-off-by: Alexander Mazuruk <a.mazuruk@samsung.com> Change-Id: I77be2fd9dd53613a1a6ad26f8f0b506073f1cca6
Diffstat (limited to 'Changelog.md')
-rw-r--r--Changelog.md13
1 files changed, 12 insertions, 1 deletions
diff --git a/Changelog.md b/Changelog.md
index 2256c28..fa33c15 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,4 +4,15 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](http://keepachangelog.com/)
and this project adheres to [Semantic Versioning](http://semver.org/).
-## [2.1.1.] - 03/02/2021 \ No newline at end of file
+## [2.2.0.] - 07/04/2021
+### Changed
+- Switched to currently recommended version of docker integration-python:8.0.0.
+- Fix issues preventing running with py3.9
+- Bumped tested python versions to 3.8,3.9.
+### Security
+- Due to dependency update following were fixed:
+ - CVE-2020-14343 (PyYAML)
+ - CWE-93 (httplib2)
+ - CVE-2018-18074 (requests)
+
+## [2.1.1.] - 03/02/2021