You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by "Duo Zhang (Jira)" <ji...@apache.org> on 2022/12/13 16:27:00 UTC

[jira] [Resolved] (HBASE-27524) Fix python requirements problem

     [ https://issues.apache.org/jira/browse/HBASE-27524?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Duo Zhang resolved HBASE-27524.
-------------------------------
    Fix Version/s: 2.6.0
                   3.0.0-alpha-4
                   2.4.16
                   2.5.3
     Hadoop Flags: Reviewed
       Resolution: Fixed

Pushed to branch-2.4+.

Thanks [~niuyulin] for reviewing!

> Fix python requirements problem
> -------------------------------
>
>                 Key: HBASE-27524
>                 URL: https://issues.apache.org/jira/browse/HBASE-27524
>             Project: HBase
>          Issue Type: Bug
>          Components: scripts, security
>            Reporter: Duo Zhang
>            Assignee: Duo Zhang
>            Priority: Major
>             Fix For: 2.6.0, 3.0.0-alpha-4, 2.4.16, 2.5.3
>
>
> The dependabot report two security problems for python requirements
> gitpython <= 3.1.20
> certifi < 2022.12.07
> And there is also a parse error
> InstallationError("Invalid requirement: 'cryptography=3.3.2' (from line 22 of /home/dependabot/dependabot-updater/dependabot_tmp_dir/requirements.txt)\nHint: = is not a valid operator. Did you mean == ?")



--
This message was sent by Atlassian Jira
(v8.20.10#820010)