Merge pull request #8177 from madhavajay/madhava/container_version_bump

Fixed security issues and bumped versions
OpenMined · Oct 18, 2023 · 49277f6 · 49277f6
2 parents 34b1768 + 8ebf4a4
commit 49277f6
Show file tree

Hide file tree

Showing 5 changed files with 89 additions and 62 deletions.
diff --git a/packages/grid/default.env b/packages/grid/default.env
@@ -30,7 +30,7 @@ DOCKER_IMAGE_TRAEFIK=traefik
 TRAEFIK_VERSION=v2.10
 REDIS_VERSION=6.2
 RABBITMQ_VERSION=3
-SEAWEEDFS_VERSION="3.55"
+SEAWEEDFS_VERSION="3.57"
 DOCKER_IMAGE_SEAWEEDFS=chrislusf/seaweedfs
 VERSION=latest
 VERSION_HASH=unknown
@@ -75,7 +75,7 @@ JAX_ENABLE_X64=True
 
 # Mongo
 MONGO_IMAGE=mongo
-MONGO_VERSION="7.0.0"
+MONGO_VERSION="7.0.2"
 MONGO_HOST=mongo
 MONGO_PORT=27017
 MONGO_USERNAME=root

diff --git a/packages/grid/frontend/package.json b/packages/grid/frontend/package.json
@@ -15,7 +15,7 @@
   "devDependencies": {
     "@playwright/test": "^1.36.1",
     "@sveltejs/adapter-node": "^1.3.1",
-    "@sveltejs/kit": "^1.22.3",
+    "@sveltejs/kit": "^1.25.2",
     "@types/prismjs": "^1.26.0",
     "@typescript-eslint/eslint-plugin": "^5.62.0",
     "@typescript-eslint/parser": "^5.62.0",
@@ -49,5 +49,10 @@
   },
   "engines": {
     "node": ">=18.0.0"
+  },
+  "pnpm": {
+    "overrides": {
+      "undici@<5.26.2": ">=5.26.2"
+    }
   }
 }
diff --git a/packages/grid/frontend/pnpm-lock.yaml b/packages/grid/frontend/pnpm-lock.yaml
diff --git a/packages/hagrid/setup.py b/packages/hagrid/setup.py
@@ -11,14 +11,14 @@
 
 packages = [
     "ascii_magic",
-    "click>=7.1",
-    "cryptography>=37.0.2",
+    "click>=8.1.7",
+    "cryptography>=41.0.4",
     "gitpython",
     "jinja2",
     "names",
-    "packaging>=21.3",
+    "packaging>=23.0",
     "paramiko",
-    "pyOpenSSL>=22.0.0",
+    "pyOpenSSL>=23.2.0",
     "requests",
     "rich",
     "setuptools",

diff --git a/packages/syft/setup.cfg b/packages/syft/setup.cfg
@@ -27,44 +27,44 @@ package_dir =
 
 syft =
     bcrypt==4.0.1
-    boto3==1.28.20
+    boto3==1.28.65
     forbiddenfruit==0.1.4
     gevent==22.10.2
     gipc==1.5.0
     jaxlib==0.4.18
     jax==0.4.18
-    loguru==0.7.0
+    loguru==0.7.2
     networkx==2.8
-    numpy>=1.22.4,<=1.24.3
+    numpy>=1.23.5,<=1.24.4
     opendp==0.8.0
-    packaging>=21.0
+    packaging>=23.0
     pandas==1.5.3
     pyarrow==11.0.0
     pycapnp==1.3.0
-    pydantic[email]==1.10.7
-    pymongo==4.3.3
+    pydantic[email]==1.10.13
+    pymongo==4.5.0
     pynacl==1.5.0
-    pyzmq>=23.2.1,<=25.1.0
-    redis==4.5.5
+    pyzmq>=23.2.1,<=25.1.1
+    redis==4.6.0
     requests==2.31.0
-    RestrictedPython==6.1
+    RestrictedPython==6.2
     result==0.10.0
-    tqdm==4.65.0
+    tqdm==4.66.1
     typeguard==2.13.3
-    typing_extensions==4.6.3
+    typing_extensions==4.8.0
     sherlock[redis,filelock]==0.4.1
-    uvicorn[standard]==0.22.0
-    fastapi==0.97.0
+    uvicorn[standard]==0.23.2
+    fastapi==0.103.2
     hagrid>=0.3
-    matplotlib==3.7.1
+    matplotlib==3.8.0
     dm-haiku==0.0.10
-    itables==1.5.3
-    safetensors==0.3.2 # Pinning as arm linux wheels, not available for safetensors in 0.3.3
-    transformers==4.30.2
-    evaluate==0.4.0
-    torch==2.0.1
-    recordlinkage==0.15
-    argon2-cffi==21.3.0
+    itables==1.6.2
+    safetensors==0.4.0
+    transformers==4.34.0
+    evaluate==0.4.1
+    torch==2.1.0
+    recordlinkage==0.16
+    argon2-cffi==23.1.0
 
 install_requires =
     %(syft)s
@@ -84,12 +84,12 @@ dev =
     %(test_plugins)s
     %(telemetry)s
     bandit==1.7.5
-    ruff==0.0.283
-    importlib-metadata==6.0.0
+    ruff==0.1.0
+    importlib-metadata==6.8.0
     isort==5.12.0
-    mypy==1.1.1
-    pre-commit==3.1.1
-    safety==2.3.5
+    mypy==1.6.0
+    pre-commit==3.5.0
+    safety>=2.4.0b1
 
 telemetry =
     opentelemetry-api==1.14.0