Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CI fixes [2024-07] #723

Merged
merged 2 commits into from
Jul 22, 2024
Merged

Conversation

rohanpm
Copy link
Member

@rohanpm rohanpm commented Jul 22, 2024

Fix up a couple of issues which had caused CI to become blocked:

  • safety started to complain about a Jinja CVE (which should be suppressed)
  • mypy started to detect an existing issue, add asserts to resolve

rohanpm added 2 commits July 22, 2024 13:06
safety started to complain about CVE-2019-8341 in jinja.
The validity of the CVE is widely disputed, and in any case it is not
exploitable here, so add it to the ignored list.
With respect to the CurrentMessage.get_current_message() function from
dramatiq middleware, either mypy or relevant type hints have become
more accurate and now reflect that the function is allowed to return
None when no message is being handled (the return type now being
"Message[Any] | None").

It is a precondition of this code that a message is being handled (via
actor invocation). Add asserts to this effect, which will let mypy rule
out the None case.
@rohanpm rohanpm changed the title safety: ignore irrelevant Jinja CVE CI fixes [2024-07] Jul 22, 2024
@rohanpm rohanpm marked this pull request as ready for review July 22, 2024 03:31
@rohanpm rohanpm merged commit 4653534 into release-engineering:master Jul 22, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants