Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update dependencies #9893

Merged
merged 2 commits into from Feb 8, 2024
Merged

update dependencies #9893

merged 2 commits into from Feb 8, 2024

Conversation

bmw
Copy link
Member

@bmw bmw commented Feb 8, 2024

Fixes #9892 and https://github.com/certbot/certbot/security/dependabot

Upgrading the base docker image has been done in previous PRs like #9415. Doing this was needed because the newer versions of cryptography need a newer version of rust.

I ran the full test suite on this branch which you can see in the GitHub status checks below. The boulder tests should fail as they're to be fixed by #9889 but everything else should pass.

@ohemorange
Copy link
Contributor

Happy to accept these changes, but out of curiosity why was libssl upgraded in the first test but not anymore? Or was that what was breaking, and not the alpine 3.18 vs 3.19?

@bmw
Copy link
Member Author

bmw commented Feb 8, 2024

libssl was what was breaking things I believe. alpine 3.18 and 3.19 are both still supported, but 3.19 only has openssl 3.0+. alpine 3.18 still has openssl 1.1 and after downgrading to 3.18 and that version of openssl, cryptography actually manages to build.

@bmw
Copy link
Member Author

bmw commented Feb 8, 2024

to clarify, I suspect it was the libssl change, but I don't actually know that. either change could have fixed things. all I know is this one seems to work and the other one hung for 3 hours with no significant output

@ohemorange
Copy link
Contributor

Works for me, though we should probably actually do that upgrade and get dependencies in order at some point, probably worth making an issue to track that.

Copy link
Contributor

@ohemorange ohemorange left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code looks good, but we should wait until docker test finishes running before merging

@bmw
Copy link
Member Author

bmw commented Feb 8, 2024

kk. I created #9894.

@bmw bmw merged commit b8b759f into master Feb 8, 2024
52 of 60 checks passed
@bmw bmw deleted the test-update-deps2024 branch February 8, 2024 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

upgrade dependencies
2 participants