cbafcca3c8
Ceilometer recently added requests-aws to requirements. Though this package is unmaintained for 10+ years upstream. Let's add awscurl to replace it. Related PR: https://review.opendev.org/c/openstack/ceilometer/+/964757 Checklist: - Is the library actively maintained?: Yes, and it's even recommended by AWS itself. - Is the library good code? Looks good to me. - Is the library license compatible? It's under the MIT license (ie: we call that variant "Expat" license in Debian, since there's multiple version of MIT). That's compatible. - Is the library already packaged in the distros we target (Ubuntu latest LTS / Debian latest)? Well, I'm the actual maintainer, and refused to package requests-aws because it's unmaintained upstream. I've just uploaded awscurl in Debian, so it's in the NEW queue. It will eventually reach Ubuntu when approved by FTP masters. - Is the library required for OpenStack project or related dev or infrastructure setup? Yes, see https://review.opendev.org/c/openstack/ceilometer/+/964757 That's a replacement for requests-aws that Ceilometer has been using, and which I don't think is maintained upstream. - If the library release is managed by the Openstack release process does it use the cycle-with-intermediary release type? N/A Signed-off-by: Thomas Goirand <zigo@debian.org> Change-Id: I3a95d3e4cc83e1bf3fec2557becc0b7d88fef2ba Signed-off-by: Tony Breeds <tony@bakeyournoodle.com>
Global Requirements and Constraints for OpenStack Projects
Security Warning
OpenStack makes no security guarantees about third-party dependencies listed here, and does not keep track of any vulnerabilities they contain. Versions of these dependencies are frozen at each coordinated release in order to stabilize upstream testing, and can contain known vulnerabilities. Consumers are STRONGLY encouraged to rely on curated distributions of OpenStack or manage security patching of dependencies themselves.
Resources and Documentation
Please refer to the dependency management documentation linked below for up to date documentation on how to use and interact with the requirements project.