Bugfix/security issues first part

build_effective_set_generator/build/Dockerfile

@@ -22,7 +22,7 @@ RUN pip install --no-cache-dir \
     --no-binary cffi \
     --no-binary cryptography \
     -r /build/requirements.txt
-    
+
 RUN pip install --no-cache-dir \
     /python/integration \
     /python/jschon-sort \

build_effective_set_generator/build/requirements.txt

@@ -1,6 +1,6 @@
 # Base module requirements (essential only)
 PyGithub==1.55
-certifi==2022.6.15
+certifi==2024.7.4
 
 boto3==1.39.4
 botocore==1.39.4
@@ -13,20 +13,20 @@ s3transfer==0.13.1
 setuptools-git-versioning==1.13.5
 six==1.16.0
 toml==0.10.2
-urllib3==2.0.7
+urllib3==2.6.3
 lxml==4.9.3
 ruamel.yaml==0.18.5
 ruamel.yaml.clib==0.2.8
 ruyaml==0.91.0
 jschon==0.11.0
 jsonschema==4.24.1
-diagrams==0.24.1
+diagrams==0.25.1
 graphviz==0.20.3
 attrs==23.2.0
 referencing==0.33.0
 rpds-py==0.17.1
 jsonschema-specifications==2023.12.1
-cryptography==41.0.3
+cryptography==46.0.5
 click==8.1.7
 deepmerge==2.0
-flatten_dict==0.4.2
+flatten_dict==0.4.2

build_effective_set_generator/commons/pom.xml

@@ -35,17 +35,17 @@
     </dependencyManagement>
 
     <dependencies>
+        <dependency>
+            <groupId>io.opentelemetry</groupId>
+            <artifactId>opentelemetry-api</artifactId>
+            <version>1.60.1</version>
+            <scope>compile</scope>
+        </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
             <version>1.23.0</version>
         </dependency>
-        <dependency>
-            <groupId>io.jenkins.plugins</groupId>
-            <artifactId>opentelemetry</artifactId>
-            <version>3.1494.v1d249433404c</version>
-            <type>pom</type>
-        </dependency>
         <dependency>
             <groupId>org.antlr</groupId>
             <artifactId>antlr4-runtime</artifactId>

build_effective_set_generator/gstring-to-jinjava-translator/pom.xml

@@ -15,7 +15,7 @@
         <antlr.version>4.13.1</antlr.version>
         <mojo.version>3.0.0</mojo.version>
         <junit.version>5.10.0</junit.version>
-        <jinjava.version>2.7.3</jinjava.version>
+        <jinjava.version>2.8.3</jinjava.version>
     </properties>
 
     <dependencyManagement>

build_effective_set_generator/parameter-calculator-bom/pom.xml

@@ -145,7 +145,7 @@
             <dependency>
                 <groupId>org.cyclonedx</groupId>
                 <artifactId>cyclonedx-core-java</artifactId>
-                <version>10.1.0</version>
+                <version>11.0.1</version>
             </dependency>
             <dependency>
                 <groupId>commons-lang</groupId>

build_effective_set_generator/parameters-processor/pom.xml

@@ -46,7 +46,7 @@
         <dependency>
             <groupId>com.hubspot.jinjava</groupId>
             <artifactId>jinjava</artifactId>
-            <version>2.7.3</version>
+            <version>2.8.3</version>
         </dependency>
         <dependency>
             <groupId>org.qubership.cloud.devops</groupId>

build_effective_set_generator/pom.xml

@@ -10,18 +10,10 @@
 
     <name>DevOps Configuration Tool Aggregator</name>
     <description>DevOps Configuration Tool Aggregator</description>
-    <url>https://wiki.jenkins-ci.org/display/JENKINS/TODO+Plugin</url>
     <modules>
         <module>parameters-processor</module>
         <module>commons</module>
     </modules>
-    <repositories>
-        <repository>
-            <id>repo.jenkins-ci.org</id>
-            <url>https://repo.jenkins-ci.org/public/</url>
-        </repository>
-    </repositories>
-
 
      <profiles>
         <profile>

build_envgene/build/requirements.txt

@@ -1,8 +1,9 @@
 # Base module requirements (essential only)
-cryptography==38.0.0
+cryptography==46.0.5
+cffi==2.0.0
 pyyaml>=6.0
 PyGithub==1.55
-certifi==2022.6.15
+certifi==2024.7.4
 
 # Build envgene requirements (essential only)
 lxml==4.9.3
@@ -13,7 +14,6 @@ jsonschema==4.24.1
 jmespath==1.0.1
 semantic-version==2.10.0
 termcolor==2.4.0
-cffi==1.16.0
 click==8.1.7
 deepmerge==2.0
 GitPython==3.1.45
@@ -29,4 +29,4 @@ qubership-pipelines-common-library==2.0.3
 # Removed heavy packages:
 # - shyaml, yamale, prettytable (not essential)
 # - ruyaml (duplicate of ruamel.yaml)
-# - diagrams (heavy with typed-ast dependency)
+# - diagrams (heavy with typed-ast dependency)

build_pipegene/build/requirements.txt

@@ -11,27 +11,27 @@ s3transfer==0.13.1
 setuptools-git-versioning==1.13.5
 six==1.16.0
 toml==0.10.2
-urllib3==2.0.7
+urllib3==2.6.3
 platformdirs>=3.0.0
 lxml==4.9.3
 ruamel.yaml==0.18.5
 ruamel.yaml.clib==0.2.8
 ruyaml==0.91.0
 jschon==0.11.0
 jsonschema==4.24.1
-diagrams==0.23.3
+diagrams==0.25.1
 attrs==23.2.0
 referencing==0.33.0
 rpds-py==0.17.1
 jsonschema-specifications==2023.12.1
-cryptography==41.0.3
-cffi==1.16.0
+cryptography==46.0.5
+cffi==2.0.0
 click==8.1.3
 shyaml==0.6.2
 yamale==4.0.4
 prettytable==3.5.0
 PyGithub==1.59.0
-certifi==2023.11.17
+certifi==2024.7.4
 platformdirs==3.11.0
 jaraco.text>=3.11.0
 jaraco.functools>=3.5.0

creds_rotation/build/requirements.txt

@@ -5,6 +5,6 @@ attrs==23.2.0
 referencing==0.33.0
 rpds-py==0.17.1
 jsonschema-specifications==2023.12.1
-cryptography==41.0.3
-cffi>=1.15
-aiofiles==23.2.0
+cryptography==46.0.5
+cffi==2.0.0
+aiofiles==23.2.0

dependencies/tests_requirements.txt

@@ -1,32 +1,32 @@
-boto3==1.29.3
-botocore==1.32.3
+boto3==1.39.4
+botocore==1.39.4
 gcip==3.0.2
 jmespath==1.0.1
 packaging==23.2
 python-dateutil==2.8.2
 PyYAML==6.0.1
-s3transfer==0.7.0
+s3transfer==0.13.1
 setuptools-git-versioning==1.13.5
 six==1.16.0
 toml==0.10.2
-urllib3==2.0.7
+urllib3==2.6.3
 lxml==4.9.3
 requests==2.32.3
 ruamel.yaml==0.18.5
 ruamel.yaml.clib==0.2.8
 ruyaml==0.91.0
 jschon==0.11.0
 jsonschema==4.24.1
-diagrams==0.23.3
+diagrams==0.25.1
 attrs==23.2.0
 referencing==0.33.0
 rpds-py==0.17.1
 jsonschema-specifications==2023.12.1
-cryptography==41.0.3
+cryptography==46.0.5
+cffi==2.0.0
 pytest==7.4.3
 junitparser==3.1.2
 hiyapyco==0.6.0
 click==8.1.7
 deepmerge==2.0
-cffi>=1.15
 aiofiles

python/artifact-searcher/pyproject.toml

@@ -9,10 +9,10 @@ requires-python = "~=3.12"
 dependencies = [
     "pydantic==2.10.6",
     "requests==2.32.3",
-    "deepdiff==8.0.1",
+    "deepdiff==8.6.2",
     "PyYAML==6.0.2",
     "responses==0.25.7",
-    "aiohttp==3.11.18",
+    "aiohttp==3.13.3",
     "asyncio==3.4.3",
     "aioresponses==0.7.8",
     "pytest-asyncio==1.0.0",

scripts/utils/handle_certs.sh

@@ -25,4 +25,4 @@ else
     # shellcheck disable=SC1091
     . /module/scripts/utils/update_ca_cert.sh "$cert"
   done < <(find "$certs_dir" -mindepth 1 -maxdepth 1 -type f -print0)
-fi
+fi