You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@solr.apache.org by ja...@apache.org on 2026/04/15 08:01:17 UTC

(solr-site) branch supply-chain-hardening updated (1f2dcaedd -> 5f1406119)

This is an automated email from the ASF dual-hosted git repository.

janhoy pushed a change to branch supply-chain-hardening
in repository https://gitbox.apache.org/repos/asf/solr-site.git


    from 1f2dcaedd Pin dependencies to harden against supply chain attacks
     add a870275eb Enable dependabot Use a real Dockerfile so dependabot can update python
     add d6b13f655 Use locked requirements.txt and add --lock option Bump pelican to 4.11
     add 5f1406119 Upgrades - beautifulsoup4 4.12.3 → 4.14.3 - jsonschema 4.22.0 → 4.26.0 - invoke 2.2.1 → 3.0.3 - livereload 2.6.3 → 2.7.1 - markupsafe 2.1.5 → 3.0.3

No new revisions were added by this update.

Summary of changes:
 .dockerignore                                      |   5 +
 .../static/.htaccess => .github/dependabot.yml     |  24 +-
 .github/workflows/build-pelican.yml                |  19 +-
 .github/workflows/pr-build-pelican.yml             |  19 +-
 themes/solr/static/.htaccess => Dockerfile         |   8 +-
 README.md                                          |  29 +-
 build.sh                                           | 152 ++++---
 themes/solr/static/.htaccess => requirements.in    |  21 +-
 requirements.lock.txt                              | 430 ------------------
 requirements.txt                                   | 496 ++++++++++++++++++++-
 10 files changed, 686 insertions(+), 517 deletions(-)
 create mode 100644 .dockerignore
 copy themes/solr/static/.htaccess => .github/dependabot.yml (67%)
 copy themes/solr/static/.htaccess => Dockerfile (67%)
 copy themes/solr/static/.htaccess => requirements.in (68%)
 delete mode 100644 requirements.lock.txt