Upgrade Python in Dockerfiles to pick up security fixes #51226
Conversation
github-actions
bot
added
the
Scope: Backend
| @@ -30,7 +30,7 @@ inputs: | |||
| python-version: | |||
| description: 'python version to install' | |||
| required: false | |||
| default: '3.8.16' | |||
| default: '3.8.17' | |||
There was a problem hiding this comment.
this version has known breakages for sentry-sdk so we can't do this quite yet -- getsentry/sentry-python#2160 (comment)
There was a problem hiding this comment.
The breakage on the SDK side means we can't upgrade on the server side?
Also, I'm seeing a fix for the SDK shipped in 1.25.1. Not enough?
There was a problem hiding this comment.
(1) yes, we use our own sdk
(2) correct, we are not on that version
There was a problem hiding this comment.
Would it make sense to upgrade the SDK version on this PR?
There was a problem hiding this comment.
no, those should be two separate PRs of two distinct actions rather than coupling two unrelated changes
There was a problem hiding this comment.
should i create the Pr for sentry SDK version upgrade.
|
This issue has gone three weeks without activity. In another week, I will close it. But! If you comment or otherwise update it, I will reset the clock, and if you remove the label "A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀 |
This pull request is to upgrade python base image to pick up the latest security fix
Legal Boilerplate
Look, I get it. The entity doing business as "Sentry" was incorporated in the State of Delaware in 2015 as Functional Software, Inc. and is gonna need some rights from me in order to utilize my contributions in this here PR. So here's the deal: I retain all rights, title and interest in and to my contributions, and by keeping this boilerplate intact I confirm that Sentry can use, modify, copy, and redistribute my contributions, under Sentry's choice of terms.