Skip to content

Commit

Permalink
Adjust pin for ansible-core
Browse files Browse the repository at this point in the history
The pin of ansible-core was originally put in place because the
pip-audit pre-commit hook identifies a vulnerability in ansible-core
2.16.13.  Normally we would pin ansible-core accordingly (>2.16.13),
but the earlier pin of ansible>=10 effectively pins ansible-core to
>=2.17 so that's what we do here.

Co-authored-by: Nick M <50747025+mcdonnnj@users.noreply.github.com>
  • Loading branch information
jsf9k and mcdonnnj committed Nov 14, 2024
1 parent 46b874f commit b5a06b4
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions requirements-test.txt
Original file line number Diff line number Diff line change
Expand Up @@ -24,12 +24,14 @@ ansible>=10,<11
# Hence we never want to install those versions.
#
# Note that the pip-audit pre-commit hook identifies a vulnerability
# in ansible-core 2.16.13.
# in ansible-core 2.16.13. Normally we would pin ansible-core
# accordingly (>2.16.13), but the above pin of ansible>=10 effectively
# pins ansible-core to >=2.17 so that's what we do here.
#
# Note that any changes made to this dependency must also be made in
# requirements.txt in cisagov/skeleton-packer and
# .pre-commit-config.yaml in cisagov/skeleton-generic.
ansible-core>2.16.13
ansible-core>=2.17
# With the release of molecule v5 there were some breaking changes so
# we need to pin at v5 or newer. However, v5.0.0 had an internal
# dependency issue so we must use the bugfix release as the actual
Expand Down

0 comments on commit b5a06b4

Please sign in to comment.