From eccdd55c6b0f3bd1e6c9eb475f5a8ba43c32c9ef Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Aug 2024 08:41:37 +0000 Subject: [PATCH 1/4] [docker] Bump the vreapis-docker group across 2 directories with 1 update Bumps the vreapis-docker group with 1 update in the /tilt/vreapis directory: python. Bumps the vreapis-docker group with 1 update in the /vreapis directory: python. Updates `python` from 3.12.2-slim to 3.12.5-slim Updates `python` from 3.12.2-slim to 3.12.5-slim --- updated-dependencies: - dependency-name: python dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vreapis-docker - dependency-name: python dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vreapis-docker ... Signed-off-by: dependabot[bot] --- tilt/vreapis/Dockerfile | 2 +- vreapis/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tilt/vreapis/Dockerfile b/tilt/vreapis/Dockerfile index 3d9a92c..788d551 100644 --- a/tilt/vreapis/Dockerfile +++ b/tilt/vreapis/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.2-slim +FROM python:3.12.5-slim WORKDIR /app diff --git a/vreapis/Dockerfile b/vreapis/Dockerfile index 9c730e6..8138b78 100644 --- a/vreapis/Dockerfile +++ b/vreapis/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.2-slim +FROM python:3.12.5-slim WORKDIR /app From 68ca609852fad8d5728810f70bb2d1ef10f0c884 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Aug 2024 08:41:56 +0000 Subject: [PATCH 2/4] [pip] Bump the vreapis-pip group in /vreapis with 7 updates Bumps the vreapis-pip group in /vreapis with 7 updates: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.0.3` | `5.1` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.14.0` | `3.15.2` | | [django-filter](https://github.com/carltongibson/django-filter) | `24.2` | `24.3` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.6.0` | `6.7.0` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.2` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.3` | | [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.3.1` | `4.4.0` | Updates `django` from 5.0.3 to 5.1 - [Commits](https://github.com/django/django/compare/5.0.3...5.1) Updates `djangorestframework` from 3.14.0 to 3.15.2 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](https://github.com/encode/django-rest-framework/compare/3.14.0...3.15.2) Updates `django-filter` from 24.2 to 24.3 - [Release notes](https://github.com/carltongibson/django-filter/releases) - [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst) - [Commits](https://github.com/carltongibson/django-filter/compare/24.2...24.3) Updates `whitenoise` from 6.6.0 to 6.7.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](https://github.com/evansd/whitenoise/compare/6.6.0...6.7.0) Updates `pyyaml` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/main/CHANGES) - [Commits](https://github.com/yaml/pyyaml/compare/6.0.1...6.0.2) Updates `requests` from 2.31.0 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.31.0...v2.32.3) Updates `django-cors-headers` from 4.3.1 to 4.4.0 - [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst) - [Commits](https://github.com/adamchainz/django-cors-headers/compare/4.3.1...4.4.0) --- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip - dependency-name: djangorestframework dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip - dependency-name: django-filter dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip - dependency-name: whitenoise dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip - dependency-name: pyyaml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vreapis-pip - dependency-name: requests dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip - dependency-name: django-cors-headers dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vreapis-pip ... Signed-off-by: dependabot[bot] --- vreapis/requirements.txt | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/vreapis/requirements.txt b/vreapis/requirements.txt index d46e574..d714961 100644 --- a/vreapis/requirements.txt +++ b/vreapis/requirements.txt @@ -1,13 +1,13 @@ -django==5.0.3 -djangorestframework==3.14.0 +django==5.1 +djangorestframework==3.15.2 djangorestframework-gis==1.0 -django-filter==24.2 -whitenoise==6.6.0 +django-filter==24.3 +whitenoise==6.7.0 gunicorn==22.0.0 -pyyaml==6.0.1 -requests==2.31.0 +pyyaml==6.0.2 +requests==2.32.3 django-dotenv==1.4.2 -django-cors-headers==4.3.1 +django-cors-headers==4.4.0 django-extensions==3.2.3 psycopg2==2.9.9 django-probes==1.7.0 From 6b57a5ca85aea2a32c9c68938011b389776799f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Aug 2024 09:04:31 +0000 Subject: [PATCH 3/4] [docker] Bump node Bumps the vre-panel-docker group with 1 update in the /vre-panel directory: node. Updates `node` from 21-alpine to 22-alpine --- updated-dependencies: - dependency-name: node dependency-type: direct:production dependency-group: vre-panel-docker ... Signed-off-by: dependabot[bot] --- vre-panel/Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/vre-panel/Dockerfile b/vre-panel/Dockerfile index 471eba0..e19dbe6 100644 --- a/vre-panel/Dockerfile +++ b/vre-panel/Dockerfile @@ -1,5 +1,5 @@ # Install dependencies only when needed -FROM node:21-alpine AS deps +FROM node:22-alpine AS deps # Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed. RUN apk add --no-cache libc6-compat WORKDIR /app @@ -12,7 +12,7 @@ RUN npm install RUN npm ci # Rebuild the source code only when needed -FROM node:21-alpine AS builder +FROM node:22-alpine AS builder ARG NODE_ENV WORKDIR /app COPY --from=deps /app/node_modules ./node_modules @@ -29,7 +29,7 @@ COPY . . RUN npm run build # Production image, copy all the files and run next -FROM node:21-alpine AS runner +FROM node:22-alpine AS runner WORKDIR /app ENV NODE_ENV production From 848be544db50abe50163e6314d90b2b1611eabbe Mon Sep 17 00:00:00 2001 From: Gabriel Pelouze Date: Thu, 8 Aug 2024 11:27:26 +0200 Subject: [PATCH 4/4] bump node in tilt Dockerfile --- tilt/vre-panel/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tilt/vre-panel/Dockerfile b/tilt/vre-panel/Dockerfile index 761da34..9f7660c 100644 --- a/tilt/vre-panel/Dockerfile +++ b/tilt/vre-panel/Dockerfile @@ -1,4 +1,4 @@ -FROM node:20-alpine3.16 +FROM node:22-alpine ARG NODE_ENV=test ENV NODE_ENV $NODE_ENV