Projets/ObsiGate
1
1
Fork 0
Code Issues 16 Pull Requests Actions Packages Projects Releases 19 Wiki Activity

fix: planchers de sécurité pip-audit — brotli, filelock, opentelemetry-api, pypdf #224
CI / security (push) Successful in 2m42s
Details
CI / lint (push) Successful in 3m22s
Details
CI / test (push) Successful in 5m34s
Details
CI / build (push) Successful in 2m48s
Details
CI / e2e (push) Successful in 19m15s
Details

Browse Source
This commit is contained in:
Spark
2026-10-25 21:02:57 +00:00
parent f29a22886a
commit 6972e9ec87
13 changed files with 184 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_ci_workflow.py
+7 -1
View File
@@ -251,11 +251,17 @@ class TestDependencySecurityFloors:
#: (paquet, plancher minimal, advisories corrigées au-dessus)
FLOORS = {
"pypdf": (6, 16, 1), # PYSEC-2026-3910, PYSEC-2026-3911 (fix 6.16.1)
# #224 : 6.19.0 (toolcache) frappée par 11 CVE, corrigées au plus
# tard en 6.21.2 ; avant : PYSEC-2026-3910/3911 (fix 6.16.1).
"pypdf": (6, 21, 2),
# BUG-095 : 2.13.0 a son propre advisory (CVE-2026-102274, fix 2.14.0).
"pyjwt": (2, 14, 0), # PYSEC-2026-178 (2.13.0) puis CVE-2026-102274 (2.14.0)
"urllib3": (2, 8, 0), # CVE-2026-97687, CVE-2026-97688, CVE-2026-97689 (fix 2.8.0)
"multidict": (6, 9, 1), # CVE-2026-104874 (fix 6.9.1 ; 6.7.x toolcache runner)
# #224 : transitives / préinstallées toolcache, auditées par pip-audit.
"brotli": (1, 2, 1), # PYSEC-2026-4322, GHSA-9v8h-qqgm-4m35 (fix 1.2.1)
"filelock": (4, 2, 1), # CVE-2026-112940, CVE-2026-112913, CVE-2026-112907 (fix 4.2.1)
"opentelemetry-api": (1, 45, 1), # CVE-2026-114603 (fix 1.45.1)
}
def test_security_floors_are_declared(self):