proxysql

Commit Graph

Author	SHA1	Message	Date
Rene Cannao	0441d5026d	security: fix all 48 Dependabot alerts — bump Python test deps Update all vulnerable Python packages in test infrastructure: Package Old New Severity CVEs PyMySQL 0.9.2 >=1.1.1 CRITICAL CVE-2024-36039 (SQL injection) requests 2.26.0 >=2.33.0 HIGH CVE-2024-35195, CVE-2024-47081, CVE-2023-32681, CVE-2026-25645 urllib3 1.26.6 >=2.6.3 HIGH CVE-2023-43804, CVE-2023-45803, CVE-2024-37891, CVE-2025-50181, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441 certifi 2021.5.30 >=2024.7.4 HIGH CVE-2022-23491, CVE-2023-37920, CVE-2024-39689 idna 2.10 >=3.7 MEDIUM CVE-2024-3651 Changes: - requirements.txt: bump all 6 packages, use >= instead of == - requirements-ubuntu24.txt: same bumps - Pipfile: bump pymysql/requests, update python_version 2.7 → 3 - Remove stale Pipfile.lock (generated for Python 2.7, all hashes outdated) API compatibility verified: - PyMySQL: pymysql.connect(), DictCursor, OperationalError, CLIENT.MULTI_STATEMENTS, defer_connect all work in 1.1.x. `passwd` kwarg is aliased to `password` internally. - requests: basic requests.post() usage unchanged - urllib3/certifi/idna: transitive deps, no direct API usage Note: CI Docker image (ubuntu:24.04) installs packages via apt-get, not pip. These requirements files are used for local dev and some CI fallback paths.	2 weeks ago
Rene Cannao	00b87013cc	Migrate and localize proxysql-tester.py logic - Migrate test-scripts from jenkins-build-scripts to test/scripts/. - Refactor proxysql-tester.py to skip tests missing from groups.json instead of failing. - Ensure correct path resolution and dependency links in localized environment. - Disable automatic pre-hook execution in the Python tester.	4 weeks ago

Author

SHA1

Message

Date

Rene Cannao

0441d5026d

security: fix all 48 Dependabot alerts — bump Python test deps

Update all vulnerable Python packages in test infrastructure:

  Package    Old       New       Severity  CVEs
  PyMySQL    0.9.2     >=1.1.1   CRITICAL  CVE-2024-36039 (SQL injection)
  requests   2.26.0    >=2.33.0  HIGH      CVE-2024-35195, CVE-2024-47081,
                                           CVE-2023-32681, CVE-2026-25645
  urllib3    1.26.6    >=2.6.3   HIGH      CVE-2023-43804, CVE-2023-45803,
                                           CVE-2024-37891, CVE-2025-50181,
                                           CVE-2025-66418, CVE-2025-66471,
                                           CVE-2026-21441
  certifi    2021.5.30 >=2024.7.4 HIGH     CVE-2022-23491, CVE-2023-37920,
                                           CVE-2024-39689
  idna       2.10      >=3.7     MEDIUM    CVE-2024-3651

Changes:
- requirements.txt: bump all 6 packages, use >= instead of ==
- requirements-ubuntu24.txt: same bumps
- Pipfile: bump pymysql/requests, update python_version 2.7 → 3
- Remove stale Pipfile.lock (generated for Python 2.7, all hashes
  outdated)

API compatibility verified:
- PyMySQL: pymysql.connect(), DictCursor, OperationalError,
  CLIENT.MULTI_STATEMENTS, defer_connect all work in 1.1.x.
  `passwd` kwarg is aliased to `password` internally.
- requests: basic requests.post() usage unchanged
- urllib3/certifi/idna: transitive deps, no direct API usage

Note: CI Docker image (ubuntu:24.04) installs packages via apt-get,
not pip. These requirements files are used for local dev and some
CI fallback paths.

Rene Cannao

00b87013cc

Migrate and localize proxysql-tester.py logic

- Migrate test-scripts from jenkins-build-scripts to test/scripts/.
- Refactor proxysql-tester.py to skip tests missing from groups.json instead of failing.
- Ensure correct path resolution and dependency links in localized environment.
- Disable automatic pre-hook execution in the Python tester.

2 Commits (6d6015a2034dbee2ea4eb50d2e84381df008fa46)