From 743da6f2bb0a02d231ce05d8160c7ab780073fee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 24 Oct 2024 16:50:44 +0000 Subject: [PATCH 1/3] Bump mysql-connector-python in /stix_shifter_modules/mysql Bumps [mysql-connector-python](https://github.com/mysql/mysql-connector-python) from 8.0.25 to 9.1.0. - [Changelog](https://github.com/mysql/mysql-connector-python/blob/trunk/CHANGES.txt) - [Commits](https://github.com/mysql/mysql-connector-python/compare/8.0.25...9.1.0) --- updated-dependencies: - dependency-name: mysql-connector-python dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- stix_shifter_modules/mysql/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stix_shifter_modules/mysql/requirements.txt b/stix_shifter_modules/mysql/requirements.txt index 2fb774a31..b2ebf7945 100644 --- a/stix_shifter_modules/mysql/requirements.txt +++ b/stix_shifter_modules/mysql/requirements.txt @@ -1 +1 @@ -mysql-connector-python==8.0.25 \ No newline at end of file +mysql-connector-python==9.1.0 \ No newline at end of file From 02835e2d53deef70c3de155d6dc4203e05f8ae6c Mon Sep 17 00:00:00 2001 From: DerekRushton <41486484+DerekRushton@users.noreply.github.com> Date: Tue, 29 Oct 2024 09:26:28 -0300 Subject: [PATCH 2/3] Update requirements.txt --- stix_shifter_modules/demo_template/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stix_shifter_modules/demo_template/requirements.txt b/stix_shifter_modules/demo_template/requirements.txt index 2fb774a31..dbf1cf4b2 100644 --- a/stix_shifter_modules/demo_template/requirements.txt +++ b/stix_shifter_modules/demo_template/requirements.txt @@ -1 +1 @@ -mysql-connector-python==8.0.25 \ No newline at end of file +mysql-connector-python==9.1.0 From 51c199f77eddf1cd4086b912d538d0ed5ad11dec Mon Sep 17 00:00:00 2001 From: DerekRushton <41486484+DerekRushton@users.noreply.github.com> Date: Tue, 29 Oct 2024 10:00:31 -0300 Subject: [PATCH 3/3] Minimum version must be 3.9 to resolve this security vulnerability. (#1744) * Minimum version must be 3.9 to resolve this security vulnerability. Signed-off-by: DerekRushton * The python version gets trimmed if it's not escaped. --------- Signed-off-by: DerekRushton --- .github/workflows/main.yml | 4 ++-- bundle_validator/README.md | 2 +- docs/README.md | 2 +- docs/lab/cli_lab.ipynb | 2 +- setup.py | 4 ++-- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index b5dc220f8..9551ce84b 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest strategy: matrix: - python-version: [3.8, 3.9] + python-version: ['3.9', '3.10'] steps: - uses: actions/checkout@v3 @@ -36,4 +36,4 @@ jobs: - name: Run unittest run: | pip install pytest - pytest -vv \ No newline at end of file + pytest -vv diff --git a/bundle_validator/README.md b/bundle_validator/README.md index 5ea1ea28a..40082996d 100644 --- a/bundle_validator/README.md +++ b/bundle_validator/README.md @@ -6,7 +6,7 @@ You can easily validate your stix bundle file by following the below steps: The following needs to be installed on your local machine: -* Python 3.8 or greater +* Python 3.9 or greater * git * [`stix2-validator`](https://github.com/oasis-open/cti-stix-validator) python library diff --git a/docs/README.md b/docs/README.md index 0e20b9c60..532b8cde0 100644 --- a/docs/README.md +++ b/docs/README.md @@ -26,7 +26,7 @@ The recommended method for installing stix-shifter is via pip. Two prerequisite ### Dependencies -STIX-shifter requries Python 3.8 or greater. See the [requirements file](../stix_shifter/requirements.txt) for library dependencies. +STIX-shifter requries Python 3.9 or greater. See the [requirements file](../stix_shifter/requirements.txt) for library dependencies. ## Usage diff --git a/docs/lab/cli_lab.ipynb b/docs/lab/cli_lab.ipynb index 708b730b6..cf574a065 100644 --- a/docs/lab/cli_lab.ipynb +++ b/docs/lab/cli_lab.ipynb @@ -161,7 +161,7 @@ "\n", "### Prerequisites\n", "\n", - "* Python 3.8 or greater\n", + "* Python 3.9 or greater\n", "* pip\n", "* git\n", "* `virtualenv` python library\n", diff --git a/setup.py b/setup.py index 5fd5a042f..7b2a85cc2 100644 --- a/setup.py +++ b/setup.py @@ -6,7 +6,7 @@ # good print(sys.version) else: - print("Error: stix-shifter requires python 3.8 or greater") + print("Error: stix-shifter requires python 3.9 or greater") exit(1) @@ -165,8 +165,8 @@ def fill_connectors(projects, modules_path): # https://pypi.python.org/pypi?%3Aaction=list_classifiers 'classifiers': [ # Optional 'License :: OSI Approved :: Apache Software License', - 'Programming Language :: Python :: 3.8', 'Programming Language :: Python :: 3.9', + 'Programming Language :: Python :: 3.10', ], 'keywords': 'datasource stix translate transform transmit', # Optional 'packages': packages, # Required