aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* chore(deps): update dependency gunicorn to v23 (#37)Renovate Bot2024-08-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [gunicorn](https://github.com/benoitc/gunicorn) ([changelog](https://docs.gunicorn.org/en/stable/news.html)) | `==22.0.0` -> `==23.0.0` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/gunicorn/23.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/gunicorn/23.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/gunicorn/22.0.0/23.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/gunicorn/22.0.0/23.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>benoitc/gunicorn (gunicorn)</summary> ### [`v23.0.0`](https://github.com/benoitc/gunicorn/releases/tag/23.0.0) [Compare Source](https://github.com/benoitc/gunicorn/compare/22.0.0...23.0.0) Gunicorn 23.0.0 has been released. This version improve HTTP 1.1. support and which improve safety You're invited to upgrade asap your own installation. # 23.0.0 - 2024-08-10 - minor docs fixes (:pr:`3217`, :pr:`3089`, :pr:`3167`) - worker_class parameter accepts a class (:pr:`3079`) - fix deadlock if request terminated during chunked parsing (:pr:`2688`) - permit receiving Transfer-Encodings: compress, deflate, gzip (:pr:`3261`) - permit Transfer-Encoding headers specifying multiple encodings. note: no parameters, still (:pr:`3261`) - sdist generation now explicitly excludes sphinx build folder (:pr:`3257`) - decode bytes-typed status (as can be passed by gevent) as utf-8 instead of raising `TypeError` (:pr:`2336`) - raise correct Exception when encounting invalid chunked requests (:pr:`3258`) - the SCRIPT_NAME and PATH_INFO headers, when received from allowed forwarders, are no longer restricted for containing an underscore (:pr:`3192`) - include IPv6 loopback address `[::1]` in default for :ref:`forwarded-allow-ips` and :ref:`proxy-allow-ips` (:pr:`3192`) \*\* NOTE \*\* - The SCRIPT_NAME change mitigates a regression that appeared first in the 22.0.0 release - Review your :ref:`forwarded-allow-ips` setting if you are still not seeing the SCRIPT_NAME transmitted - Review your :ref:`forwarder-headers` setting if you are missing headers after upgrading from a version prior to 22.0.0 \*\* Breaking changes \*\* - refuse requests where the uri field is empty (:pr:`3255`) - refuse requests with invalid CR/LR/NUL in heade field values (:pr:`3253`) - remove temporary `--tolerate-dangerous-framing` switch from 22.0 (:pr:`3260`) - If any of the breaking changes affect you, be aware that now refused requests can post a security problem, especially so in setups involving request pipe-lining and/or proxies. Fix CVE-2024-1135 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yMy4xIiwidXBkYXRlZEluVmVyIjoiMzguMjMuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119--> Reviewed-on: https://git.mgrote.net/container-images/python-api-server/pulls/37 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* ci: remove commit + version tagsMichael Grote2024-08-061-25/+4
|
* make curl in healthcheck silentMichael Grote2024-07-301-1/+1
|
* chore(deps): update woodpeckerci/plugin-git docker tag to v2.5.2 (#36)Renovate Bot2024-07-261-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* ci: disable cache and enable manual runsMichael Grote2024-07-261-2/+3
|
* chore(deps): update docker docker tag to v27.1.1 (#35)Renovate Bot2024-07-251-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v27.1.0 (#34)Renovate Bot2024-07-231-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update alpine docker tag to v3.20.2 (#33)Renovate Bot2024-07-231-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update woodpeckerci/plugin-git docker tag to v2.5.1 (#32)Renovate Bot2024-07-131-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v27.0.3 (#31)Renovate Bot2024-07-021-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v27 (#29)Renovate Bot2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR contains the following updates: | Package | Update | Change | |---|---|---| | docker | major | `26.1.4` -> `27.0.2` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MTcuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQxOS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=--> Reviewed-on: https://git.mgrote.net/container-images/python-api-server/pulls/29 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.4 (#30)Renovate Bot2024-06-261-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update alpine docker tag to v3.20.1 (#28)Renovate Bot2024-06-201-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update zricethezav/gitleaks docker tag to v8.18.4 (#27)Renovate Bot2024-06-151-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.3 (#26)Renovate Bot2024-06-081-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.1.4 (#25)Renovate Bot2024-06-061-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update zricethezav/gitleaks docker tag to v8.18.3 (#24)Renovate Bot2024-06-031-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update dependency requests to v2.32.3 (#23)Renovate Bot2024-05-301-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update alpine docker tag to v3.20.0 (#22)Renovate Bot2024-05-231-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update dependency requests to v2.32.2 (#21)Renovate Bot2024-05-221-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update dependency requests to v2.32.1 (#20)Renovate Bot2024-05-211-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.1.3 (#19)Renovate Bot2024-05-171-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.2 (#18)Renovate Bot2024-05-161-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* ci: fix when cronMichael Grote2024-05-142-6/+6
|
* chore(deps): update docker docker tag to v26.1.2 (#17)Renovate Bot2024-05-111-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* configure: renovatebotMichael Grote2024-05-081-1/+11
|
* add pylint (#15)Michael Grote2024-05-081-3/+4
| | | | | | Reviewed-on: https://git.mgrote.net/container-images/python-api-server/pulls/15 Co-authored-by: Michael Grote <michael.grote@posteo.de> Co-committed-by: Michael Grote <michael.grote@posteo.de>
* fix linter errorsMichael Grote2024-05-081-10/+10
| | | | Signed-off-by: Michael Grote <michael.grote@posteo.de>
* ci: add pylintMichael Grote2024-05-081-0/+8
|
* ci: new default workflow for imagesMichael Grote2024-05-062-5/+12
|
* chore(deps): update dependency flask-cors to v4.0.1 (#14)Renovate Bot2024-05-051-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.1.1 (#13)Renovate Bot2024-05-011-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to ↵Renovate Bot2024-04-271-1/+1
| | | | | | | v1.1.117 (#12) Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.1.0 (#10)Renovate Bot2024-04-261-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to ↵Renovate Bot2024-04-261-1/+1
| | | | | | | v1.1.116 (#11) Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to ↵Renovate Bot2024-04-221-1/+1
| | | | | | | v1.1.115 (#9) Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.0.2 (#8)Renovate Bot2024-04-201-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update dependency gunicorn to v22 (#7)Renovate Bot2024-04-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gunicorn](https://github.com/benoitc/gunicorn) ([changelog](https://docs.gunicorn.org/en/stable/news.html)) | major | `==21.2.0` -> `==22.0.0` | --- ### Release Notes <details> <summary>benoitc/gunicorn (gunicorn)</summary> ### [`v22.0.0`](https://github.com/benoitc/gunicorn/releases/tag/22.0.0): Gunicorn 22.0 has been released [Compare Source](https://github.com/benoitc/gunicorn/compare/21.2.0...22.0.0) **Gunicorn 22.0.0 has been released.** This version fix the numerous security vulnerabilities. You're invited to upgrade asap your own installation. Changes: 22.0.0 - 2024-04-17 =================== - use `utime` to notify workers liveness - migrate setup to pyproject.toml - fix numerous security vulnerabilities in HTTP parser (closing some request smuggling vectors) - parsing additional requests is no longer attempted past unsupported request framing - on HTTP versions < 1.1 support for chunked transfer is refused (only used in exploits) - requests conflicting configured or passed SCRIPT_NAME now produce a verbose error - Trailer fields are no longer inspected for headers indicating secure scheme - support Python 3.12 ** Breaking changes ** - minimum version is Python 3.7 - the limitations on valid characters in the HTTP method have been bounded to Internet Standards - requests specifying unsupported transfer coding (order) are refused by default (rare) - HTTP methods are no longer casefolded by default (IANA method registry contains none affected) - HTTP methods containing the number sign (#) are no longer accepted by default (rare) - HTTP versions < 1.0 or >= 2.0 are no longer accepted by default (rare, only HTTP/1.1 is supported) - HTTP versions consisting of multiple digits or containing a prefix/suffix are no longer accepted - HTTP header field names Gunicorn cannot safely map to variables are silently dropped, as in other software - HTTP headers with empty field name are refused by default (no legitimate use cases, used in exploits) - requests with both Transfer-Encoding and Content-Length are refused by default (such a message might indicate an attempt to perform request smuggling) - empty transfer codings are no longer permitted (reportedly seen with really old & broken proxies) ** SECURITY ** - fix CVE-2024-1135 1. Documentation is available there: https://docs.gunicorn.org/en/stable/news.html 2. Packages: https://pypi.org/project/gunicorn/ </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMDAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjMwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=--> Reviewed-on: https://git.mgrote.net/container-images/python-api-server/pulls/7 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to ↵Renovate Bot2024-04-141-1/+1
| | | | | | | v1.1.114 (#6) Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update docker docker tag to v26.0.1 (#5)Renovate Bot2024-04-131-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update dependency flask to v3.0.3 (#4)Renovate Bot2024-04-071-1/+1
| | | | | Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to ↵Renovate Bot2024-04-041-1/+1
| | | | | | | v1.1.113 (#3) Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* ci: shellcheck: set tag to v0.10.0Michael Grote2024-04-041-1/+1
|
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to v1.1.111Renovate Bot2024-04-041-1/+1
|
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to v1.1.110Renovate Bot2024-04-041-1/+1
|
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to v1.1.109Renovate Bot2024-03-211-1/+1
|
* chore(deps): update docker docker tag to v26 (#32)Renovate Bot2024-03-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR contains the following updates: | Package | Update | Change | |---|---|---| | docker | major | `25.0.5` -> `26.0.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjIuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Reviewed-on: https://git.mgrote.net/container-images/python-api-server/pulls/32 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
* chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to v1.1.108Renovate Bot2024-03-201-1/+1
|
* chore(deps): update docker docker tag to v25.0.5Renovate Bot2024-03-201-1/+1
|
* set alpine versionMichael Grote2024-03-131-1/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2026-03-14 16:58:15 +0100