Fix lock, [MEDIUM] [email protected]: SNYK-PYTHON-FIONA-7462744 CWE-400 [F…

…ixed in: 1.10b2]
camptocamp · Sep 17, 2024 · 810713f · 810713f
1 parent 87494b1
commit 810713f
Show file tree

Hide file tree

Showing 5 changed files with 96 additions and 141 deletions.
diff --git a/docker/config/Dockerfile b/docker/config/Dockerfile
@@ -28,7 +28,7 @@ FROM base-all as runner
 
 RUN --mount=type=cache,target=/root/.cache \
     --mount=type=bind,from=poetry,source=/tmp,target=/poetry \
-    PIP_NO_BINARY=fiona python3 -m pip install --disable-pip-version-check --no-deps --requirement=/poetry/requirements.txt \
+    python3 -m pip install --disable-pip-version-check --no-deps --requirement=/poetry/requirements.txt \
     && (strip /usr/local/lib/python3.*/dist-packages/*/*.so || true) \
     && pip freeze > /requirements.txt
 

diff --git a/docker/config/poetry.lock b/docker/config/poetry.lock
diff --git a/docker/config/pyproject.toml b/docker/config/pyproject.toml
@@ -7,7 +7,7 @@ authors = []
 [tool.poetry.dependencies]
 python = ">=3.10,<3.11"
 c2c-template = "2.3.0"
-fiona = "1.8.22"
+fiona = "1.10.1"
 defusedxml = "0.7.1"
 lxml = "4.9.4"
 jinja2 = "3.1.4"

diff --git a/docker/qgisserver/python/3.10/Pipfile.lock b/docker/qgisserver/python/3.10/Pipfile.lock