You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "gpchandran (via GitHub)" <gi...@apache.org> on 2025/03/20 21:08:52 UTC
[PR] Update Dockerfile [superset]
gpchandran opened a new pull request, #32780:
URL: https://github.com/apache/superset/pull/32780
Debian OS upgrade fix some critical OS vulnerabilities
<!---
Please write the PR title following the conventions at https://www.conventionalcommits.org/en/v1.0.0/
Example:
fix(dashboard): load charts correctly
-->
### SUMMARY
<!--- Describe the change below, including rationale and design decisions -->
### BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
<!--- Skip this if not applicable -->
### TESTING INSTRUCTIONS
<!--- Required! What steps can be taken to manually verify the changes? -->
### ADDITIONAL INFORMATION
<!--- Check any relevant boxes with "x" -->
<!--- HINT: Include "Fixes #nnn" if you are fixing an existing issue -->
- [ ] Has associated issue:
- [ ] Required feature flags:
- [ ] Changes UI
- [ ] Includes DB Migration (follow approval process in [SIP-59](https://github.com/apache/superset/issues/13351))
- [ ] Migration is atomic, supports rollback & is backwards-compatible
- [ ] Confirm DB migration upgrade and downgrade tested
- [ ] Runtime estimates and downtime expectations provided
- [ ] Introduces new feature or API
- [ ] Removes existing feature or API
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "mistercrunch (via GitHub)" <gi...@apache.org>.
mistercrunch commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742013877
LGTM + added the flag `v4.1` that tells the release manager to consider for LTS
One side thought is that it'd be great to align our CI with exact python version with the docker image, but can decouple that from this PR. Here's where it lives in CI -> https://github.com/apache/superset/blob/master/.github/actions/setup-backend/action.yml#L29
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "mistercrunch (via GitHub)" <gi...@apache.org>.
mistercrunch merged PR #32780:
URL: https://github.com/apache/superset/pull/32780
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "sadpandajoe (via GitHub)" <gi...@apache.org>.
sadpandajoe commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2743786007
> Sorry @sadpandajoe @mistercrunch - I did create PR to master - #32240 - pinged here for cherrypick into 4.1.2
>
> Is it possible to consider for 4.1.2 as 5.0.0 release taking time @michael-s-molina
Not for 4.1.2 as I think we'll have the votes for that official release. We may cut a 4.1.3 with some other fixes in so it can make it into that one.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "sadpandajoe (via GitHub)" <gi...@apache.org>.
sadpandajoe commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742015536
@mistercrunch wait, this wasn't pointed to master and instead was merged directly into the 4.1 branch. It means if this wasn't done, it won't be picked up in future releases.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "mistercrunch (via GitHub)" <gi...@apache.org>.
mistercrunch commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742016630
Man they need to make make it flashing-bright-red when the PR isn't targeting the main branch. What should we do here?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] Update Dockerfile [superset]
Posted by "gpchandran (via GitHub)" <gi...@apache.org>.
gpchandran commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2741667156
@sadpandajoe - can you please review and consider this PR for 4.1.2, This will address Debian OS level Vulnerabilities
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "sadpandajoe (via GitHub)" <gi...@apache.org>.
sadpandajoe commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742013999
> @sadpandajoe - can you please review and consider this PR for 4.1.2, This will address Debian OS level Critical and High Vulnerabilities
Probably not for 4.1.2 but for the next one
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "gpchandran (via GitHub)" <gi...@apache.org>.
gpchandran commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2743758697
Sorry @sadpandajoe @mistercrunch - I did create PR to master - https://github.com/apache/superset/pull/32240 - pinged here for cherrypick into 4.1.2
Is it possible to consider for 4.1.2 as 5.0.0 release taking time @michael-s-molina
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "mistercrunch (via GitHub)" <gi...@apache.org>.
mistercrunch commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742015784
Oh ooops.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "mistercrunch (via GitHub)" <gi...@apache.org>.
mistercrunch commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742017682
Could use a new PR against `master` for sure though.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore: bump base image in Dockerfile with `ARG PY_VER=3.11.11-slim-bookworm` [superset]
Posted by "sadpandajoe (via GitHub)" <gi...@apache.org>.
sadpandajoe commented on PR #32780:
URL: https://github.com/apache/superset/pull/32780#issuecomment-2742017806
I just created a new pr to revert this in the 4.1 branch and then will merge that in. But if this isn't already opened in master, we should open it again against master.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org