Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from StackStorm:master #134

Open
wants to merge 1,943 commits into
base: master
Choose a base branch
from
Open

Conversation

pull[bot]
Copy link

@pull pull bot commented Dec 27, 2021

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Dec 27, 2021
cognifloyd and others added 29 commits October 11, 2024 12:47
…xture

Writes various test scenarios in the test sandbox.
This should avoid repeating the setup in every test.
…ules

And fix the identified mistake in conftest.
These are not test files:
- st2actions/tests/unit/test_async_runner.py
- st2actions/tests/unit/test_polling_async_runner.py

It looks like they were copied to st2tests/st2tests/mocks/runners/
at some point. Nothing imports from or uses the copies in st2actions,
so just delete them.
* Drop six use for binary/string type identification

With Python 3.6 being the minimum supported version, dropping six here
and utilising 3.x type identifiers.

* Use UTF-8 codepage in pywinrm shells

This change opens a shell with the 65001 codepage, ensuring raw string
responses are UTF-8 encoded.

Fixes #6034.
Lockfile diff: lockfiles/st2.lock [st2]

==                    Upgraded dependencies                     ==

  orjson                         3.10.7       -->   3.10.10
  st2-auth-backend-flat-file     0.2.0        -->   0.3.0
  webob                          1.8.8        -->   1.8.9

Also bumps locked commit for st2-auth-ldap
Lockfile diff: lockfiles/st2.lock [st2]

==                    Upgraded dependencies                     ==

  chardet                        3.0.4        -->   5.2.0
  networkx                       2.8.8        -->   3.1
  redis                          5.1.1        -->   5.2.0
Lockfile diff: lockfiles/flake8.lock [flake8]

==                    Upgraded dependencies                     ==

  flake8                         4.0.1        -->   7.0.0
  flake8-copyright               0.2.2        -->   0.2.4
  mccabe                         0.6.1        -->   0.7.0
  pycodestyle                    2.8.0        -->   2.11.1
  pyflakes                       2.4.0        -->   3.2.0
  setuptools                     69.2.0       -->   75.2.0
  st2flake8                      0.1.0        -->   0.2.0

==                     Removed dependencies                     ==

  flake8-polyfill                1.0.2
Lockfile diff: lockfiles/st2.lock [st2]

==                    Upgraded dependencies                     ==

  flask                          2.1.3        -->   3.0.3
  markupsafe                     2.0.1        -->   2.1.5
  werkzeug                       2.1.2        -->   3.0.4

==                      Added dependencies                      ==

  blinker                        1.8.2
Lockfile diff: lockfiles/st2.lock [st2]

==                !! Downgraded dependencies !!                 ==

  pytest                         8.3.3        -->   7.0.1

==                      Added dependencies                      ==

  coverage                       7.4.4
  execnet                        2.1.1
  icdiff                         2.0.7
  pprintpp                       0.4.0
  py                             1.11.0
  py-cpuinfo                     9.0.0
  pygal                          3.0.5
  pygaljs                        1.0.2
  pytest-benchmark               3.4.1
  pytest-cov                     3.0.0
  pytest-forked                  1.6.0
  pytest-icdiff                  0.9
  pytest-xdist                   2.5.0

==                     Removed dependencies                     ==

  exceptiongroup                 1.2.2
Lockfile diff: lockfiles/bandit.lock [bandit]

==                    Upgraded dependencies                     ==

  bandit                         1.7.0        -->   1.7.10
  gitpython                      3.1.18       -->   3.1.43
  pbr                            6.0.0        -->   6.1.0
  pyyaml                         6.0.1        -->   6.0.2
  setuptools                     69.2.0       -->   75.2.0
  stevedore                      5.2.0        -->   5.3.0

==                      Added dependencies                      ==

  markdown-it-py                 3.0.0
  mdurl                          0.1.2
  pygments                       2.18.0
  rich                           13.9.3
  typing-extensions              4.12.2

==                     Removed dependencies                     ==

  six                            1.16.0
Test results:
>> Issue: [B507:ssh_no_host_key_verification] Paramiko call with policy set to automatically trust the unknown host key.
   Severity: High   Confidence: Medium
   CWE: CWE-295 (https://cwe.mitre.org/data/definitions/295.html)
   More Info: https://bandit.readthedocs.io/en/1.7.10/plugins/b507_ssh_no_host_key_verification.html
   Location: ./st2common/st2common/runners/paramiko_ssh.py:781:8
780             client = paramiko.SSHClient()
781             client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
782

--------------------------------------------------

Code scanned:
        Total lines of code: 21204
        Total lines skipped (#nosec): 0
        Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
        Total issues (by severity):
                Undefined: 0
                Low: 15
                Medium: 13
                High: 1
        Total issues (by confidence):
                Undefined: 0
                Low: 3
                Medium: 13
                High: 13
Files skipped (0):
m4dcoder and others added 30 commits February 17, 2025 12:56
Add systemd service files for st2workflowengine.

Cherry-picked from StackStorm/st2-packages@cef2f12
… API based services.

This way we don't miss various log messages generated by gunicorn worker
processes.

Corresponding StackStorm/st2 change: #4206

Cherry-picked from StackStorm/st2-packages@1c1a704
This prepares for pants-based packaging.
This partially reverts commit 0f58e6a.

This should make it easier to apply changes from st2-packages repo.
Originally added in 0f58e6a
Reverted in a04e594

Now reapplying after cherry-picking changes from st2-packages repo.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.