mirror of
https://github.com/ansible/awx.git
synced 2026-02-16 10:40:01 -03:30
9d9c125e47
* feat: 38589 GitHub App Authentication (#15807) * feat: 38589 GitHub App Authentication Allows both git@<personal-token> and x-access-token@<github-access-token> when authenticating using git. This allows GitHub App tokens to work without interfering with existing authentication types. --------- Co-authored-by: Jake Jackson <thedoubl3j@Jakes-MacBook-Pro.local> * revert change made to allow UI to accept x-access-token, just use htt… (#15851) revert change made to allow UI to accept x-access-token, just use https:// instead * Add Github dep for new cred support if used (#15850) * Add pygithub for new app token support * fixed git requirements file with new * added new github dep and relevant deps it needs * add required licenses * Add artifacts to satisfy license check * Remove duplicated license --------- Co-authored-by: Andrea Restle-Lay <arestlel@redhat.com> Co-authored-by: Alan Rominger <arominge@redhat.com> * Remove deps update it came with the cherry-pick and is not needed in this version Remove unneeded deps updates from requirements.in Remove point to awx-plugins as it is not needed in tower * Add a credential plugin that uses GitHub Apps to get tokens * Add github app tests * Ran requirements updater script Ran black on github_app_test to fix formatting issue Add scm_github_app to managed credentials Ran updater script to reflect new deps Added github app info to def build_passwords in jobs.py, cred now appears in credential types Update ManagedCredentialType for GitHub App to match what we have in awx-plugins Update inputs in maManagedCredentialType to github_app_inputs to communicate with awx/main/credential_plugins/github_app.py Revert incorrect change in ManagedCredentialType, change github_app_lookup to call inputs instead of github_app_inputs Updated namespace to github_app_lookup to agree with nomenclature used in the rest of the implementation and to resolve failing API test Remove import pointing to awx plugins and update to point to credential_plugins Remove references to gh_app_plugin_mod and change to github_app Remove from awx_plugins.interfaces._temporary_private_django_api import ( # noqa: WPS436 to resolve failing test Remove flake8 typing & typing references that do not exist in this version of Tower Remove references in jobs.py and __init__.py since this is an external cred type and registered it in setup.cfg instead Remove blank line REvise name in cfg from github_app_lookup to github_app to see if that ifxes module not found error Revise first declaration of github_app to agree with file name to see if that resolves issue Rename line 174 to agree with what's in config Fix reference to github_app_lookup to github_app Linters compliaining about the github_app in __all__ not being defined, renamed to see if that aligns them Fix naming in test to correspond to naming of cred type Update naming to be more specific and add blank line to setup.cfg Remove __all__ from githubapp.py to satisfy linters Revert formatting change since it is not needed in this repository * Add blank line at the end of requirements.in --------- Co-authored-by: Andrea Restle-Lay <andrearestlelay@gmail.com> Co-authored-by: Jake Jackson <thedoubl3j@Jakes-MacBook-Pro.local> Co-authored-by: Jake Jackson <jljacks93@gmail.com> Co-authored-by: Andrea Restle-Lay <arestlel@redhat.com> Co-authored-by: Alan Rominger <arominge@redhat.com>
85 lines
2.7 KiB
Plaintext
85 lines
2.7 KiB
Plaintext
aiohttp>=3.11.6 # CVE-2024-52304
|
|
ansiconv==1.0.0 # UPGRADE BLOCKER: from 2013, consider replacing instead of upgrading
|
|
ansible-runner==2.4.0
|
|
jq # used for indirect host counting feature
|
|
asciichartpy
|
|
asn1
|
|
azure-identity
|
|
azure-keyvault
|
|
boto3
|
|
botocore
|
|
channels
|
|
channels-redis
|
|
cryptography>=41.0.7 # CVE-2023-49083
|
|
Cython<3 # due to https://github.com/yaml/pyyaml/pull/702
|
|
daphne
|
|
distro
|
|
django==4.2.18 # CVE-2024-56374
|
|
django-auth-ldap
|
|
django-cors-headers
|
|
django-crum
|
|
django-extensions
|
|
django-guid==3.2.1
|
|
django-oauth-toolkit<2.0.0 # Version 2.0.0 has breaking changes that will need to be worked out before upgrading
|
|
django-polymorphic
|
|
django-pglocks
|
|
django-radius
|
|
django-solo
|
|
django-split-settings==1.0.0 # We hit a strange issue where the release process errored when upgrading past 1.0.0 see UPGRADE BLOCKERS
|
|
djangorestframework>=3.15.2
|
|
djangorestframework-yaml
|
|
filelock
|
|
GitPython>=3.1.37 # CVE-2023-41040
|
|
grpcio>=1.68.0 # CVE-2024-11407
|
|
irc
|
|
jinja2>=3.1.6 # CVE-2025-27516
|
|
JSON-log-formatter
|
|
jsonschema
|
|
Markdown # used for formatting API help
|
|
maturin # pydantic-core build dep
|
|
msgpack<1.0.6 # 1.0.6+ requires cython>=3
|
|
msrestazure
|
|
OPA-python-client==2.0.2 # Code contain monkey patch targeted to 2.0.2 to fix https://github.com/Turall/OPA-python-client/issues/29
|
|
openshift
|
|
opentelemetry-api~=1.24 # new y streams can be drastically different, in a good way
|
|
opentelemetry-sdk~=1.24
|
|
opentelemetry-instrumentation-logging
|
|
opentelemetry-exporter-otlp
|
|
pexpect==4.7.0 # see library notes
|
|
prometheus_client
|
|
psycopg
|
|
psutil
|
|
pygerduty
|
|
PyGithub <= 2.6.0
|
|
pyopenssl>=23.2.0 # resolve dep conflict from cryptography pin above
|
|
pyparsing==2.4.6 # Upgrading to v3 of pyparsing introduce errors on smart host filtering: Expected 'or' term, found 'or' (at char 15), (line:1, col:16)
|
|
python-daemon>3.0.0
|
|
python-dsv-sdk>=1.0.4
|
|
python-tss-sdk>=1.2.1
|
|
python-ldap
|
|
pyyaml>=6.0.1
|
|
pyzstd # otel collector log file compression library
|
|
receptorctl==1.5.3
|
|
social-auth-core == 4.5.4 # hard pinned due to resolver picking CVE version when uncapped
|
|
social-auth-app-django==5.4.2 # see UPGRADE BLOCKERs
|
|
sqlparse==0.5.0 # CVE-2024-4340
|
|
redis[hiredis]
|
|
requests
|
|
slack-sdk
|
|
tacacs_plus==1.0 # UPGRADE BLOCKER: auth does not work with later versions
|
|
twilio
|
|
twisted[tls]>=24.7.0 # CVE-2024-41810
|
|
urllib3>=1.26.19 # CVE-2024-37891
|
|
uWSGI>=2.0.28
|
|
uwsgitop
|
|
wheel>=0.38.1 # CVE-2022-40898
|
|
pip==21.2.4 # see UPGRADE BLOCKERs
|
|
setuptools # see UPGRADE BLOCKERs
|
|
setuptools_scm[toml] # see UPGRADE BLOCKERs, xmlsec build dep
|
|
setuptools-rust>=0.11.4 # cryptography build dep
|
|
pkgconfig>=1.5.1 # xmlsec build dep - needed for offline build
|
|
django-flags>=5.0.13
|
|
# Temporarily added to use ansible-runner from git branch, to be removed
|
|
# when ansible-runner moves from requirements_git.txt to here
|
|
pbr
|