Skip to content

update idna and other dependencies#1029

Merged
jsjiang merged 7 commits into
developfrom
1028_security_updates
Jul 7, 2026
Merged

update idna and other dependencies#1029
jsjiang merged 7 commits into
developfrom
1028_security_updates

Conversation

@jsjiang

@jsjiang jsjiang commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

@sfisher Hi Scott,
This is to update Python dependencies to resolve Dependabot alerts on Idna and cryptography. The updated code is on ezid-stg with tag v3.3.33_rc0. Functional and UI tests look good.

Please review and let me know if you have questions.

Thank you

Jing

@jsjiang
jsjiang requested review from Copilot and sfisher July 6, 2026 17:39

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@jsjiang

jsjiang commented Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

@sfisher It looks like if failed unit tests. I am investigating.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated 1 comment.

Comment thread tests/test_api.py
@jsjiang

jsjiang commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

@sfisher Hi Scott, the github action errors were resolved. The root cause was the inconsistency of the output of request.node.name which was used to identify sample data file. It is introduced by pytest runtime and/or version.

  • specified pytest version for local and githib test environments
  • cconstructed sample data file name based on test function name and parameters

Release candidate v3.3.33_rc2 is on ezid-stg and has passed functional and UI tests.

Please review and let me know if you have questions.

Thank you

Jing

@sfisher sfisher left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi Jing,

This worked ok for me but I had an issue with my .venv where pytest --ds=settings.tests tests/ gave errors about ui_tags.

I got it to work by using python -m pytest --ds=settings.tests tests/.

An LLM suggested adding this to the top of pyproject.toml to get the error to go away with a .venv. Most of the packages is already there but the ui_tags isn't and it says by adding it, it should enable pytest --ds=settings.tests tests/ to work correctly.

packages = [
    { include = "ezidapp" },
    { include = "settings" },
    { include = "impl" },
    { include = "ui_tags" },
]

I'm not sure that this matters much, but the updates and code itself seems ok to me.

@jsjiang

jsjiang commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

@sfisher Thank you Scott for reviewing and testing!

EZID uses pyenv to setup Python environment. I tried .venv and it worked for me without the ut_tags error.
I will add a few things to the Unit & CI Tests instructions:

  1. Run pip install .
  2. Run pip install -r requirements-dev.txt
  3. Run ./prepare_test_db.sh to prepare test database.

Jing

@jsjiang
jsjiang merged commit 1583bf2 into develop Jul 7, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants