Skip to content

Commit

Permalink
[anaconda] Update jupyter_server package due to GHSA-r726-vmfq-j9j3 (
Browse files Browse the repository at this point in the history
…#754)

* Bump `jupyter_server` package version

* Add test

* Update manifest
  • Loading branch information
alexander-smolyakov authored Sep 13, 2023
1 parent c8a3cdc commit bf0a298
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 2 deletions.
4 changes: 3 additions & 1 deletion src/anaconda/.devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,9 @@ RUN python3 -m pip install --upgrade \
# https://github.com/advisories/GHSA-qppv-j76h-2rpx
tornado==6.3.3 \
# https://github.com/advisories/GHSA-282v-666c-3fvg
transformers==4.30.0
transformers==4.30.0 \
# https://github.com/advisories/GHSA-r726-vmfq-j9j3
jupyter_server==2.7.2

# Reset and copy updated files with updated privs to keep image size down
FROM mcr.microsoft.com/devcontainers/base:1-bullseye
Expand Down
3 changes: 2 additions & 1 deletion src/anaconda/manifest.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,8 @@
"Werkzeug",
"requests",
"tornado",
"transformers"
"transformers",
"jupyter_server"
],
"other": {
"git": {},
Expand Down
1 change: 1 addition & 0 deletions src/anaconda/test-project/test.sh
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ checkPythonPackageVersion "torch" "1.13.1"
checkPythonPackageVersion "transformers" "4.30.0"
checkPythonPackageVersion "mpmath" "1.3.0"
checkPythonPackageVersion "aiohttp" "3.8.5"
checkPythonPackageVersion "jupyter_server" "2.7.2"

# The `tornado` package doesn't have the `__version__` attribute so we can use the `version` attribute.
tornado_version=$(python -c "import tornado; print(tornado.version)")
Expand Down

0 comments on commit bf0a298

Please sign in to comment.