Files
cloudbase-init/tox.ini
Adrian Vladu f5857a9bab python: cve: use latest cryptography and urllib3
Use:
https://raw.githubusercontent.com/openstack/requirements/7d16424510c49daa913fc20a6300427b72522231/upper-constraints.txt
as baseline and then change:

```
cryptography: 43.0.3 to 44.0.1
urllib3: 1.26.20 to 2.5.0
```

Fixes the below pip-audit failures:

```
Found 2 known vulnerabilities in 2 packages
------------ ------- ------------------- -------
cryptography 43.0.3  GHSA-79v4-65xg-pq4g 44.0.1
urllib3      1.26.20 GHSA-pq67-6m6q-mj2v 2.5.0
```

Change-Id: I4c1994ab7dc27f902aa51ac6945776c23f9ff2fd
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2025-12-18 13:05:42 +00:00

51 lines
1.4 KiB
INI

[tox]
minversion = 4.0.2
envlist = py3,pep8
skipsdist = True
[testenv]
usedevelop = True
setenv = VIRTUAL_ENV={envdir}
deps =
-c{env:TOX_CONSTRAINTS_FILE:upper-constraints.txt}
-r{toxinidir}/test-requirements.txt
-r{toxinidir}/requirements.txt
commands = stestr run --slowest {posargs}
[testenv:pep8]
commands = flake8 {posargs}
[testenv:cover]
setenv =
{[testenv]setenv}
PYTHON=coverage run --source cloudbaseinit --parallel-mode
commands =
stestr run --no-subunit-trace {posargs}
coverage combine
coverage report --fail-under=82 --skip-covered
coverage html -d cover
coverage xml -o cover/coverage.xml
[testenv:venv]
commands = {posargs}
[testenv:docs]
deps =
-c{env:TOX_CONSTRAINTS_FILE:upper-constraints.txt}
-r{toxinidir}/doc/requirements.txt
-egit+https://github.com/openstack/cloudbase-init\#egg=cloudbase-init
commands =
sphinx-build -a -E -W -d doc/build/doctrees -b html doc/source doc/build/html
[testenv:releasenotes]
deps = {[testenv:docs]deps}
commands =
sphinx-build -a -E -W -d releasenotes/build/doctrees -b html releasenotes/source releasenotes/build/html
[flake8]
# E125 is deliberately excluded. See https://github.com/jcrocholl/pep8/issues/126
# E251 Skipped due to https://github.com/jcrocholl/pep8/issues/301
ignore = E125,E251,W503,W504,E305,E731,E117,W605,F632,E741,H216,F522,H215,H211,E721
exclude = .venv,.git,.tox,dist,doc,*openstack/common*,*lib/python*,*egg,build,tools