Merge pull request #508 from freedomofpress/safety-75180

chore: update to `pip` 25.0 for Safety 75180
freedomofpress · Jan 31, 2025 · 2c9ea75 · 2c9ea75
2 parents 89e466b + 9dcf382
commit 2c9ea75
Show file tree

Hide file tree

Showing 14 changed files with 40 additions and 46 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -43,3 +43,4 @@ jobs:
           ./scripts/verify-sha256sum-signature securedrop-client
           ./scripts/verify-sha256sum-signature securedrop-export
           ./scripts/verify-sha256sum-signature securedrop-log
+          ./scripts/verify-sha256sum-signature workstation-bootstrap
diff --git a/workstation-bootstrap/build-requirements.txt b/workstation-bootstrap/build-requirements.txt
@@ -2,7 +2,7 @@ build==1.2.1 --hash=sha256:246810623c6c053ba7c52f2c1913a6f4fa26f04c0a751e3b1a49c
 cython==0.29.33 --hash=sha256:927f6456a45d2b3e7d57ef0a4a2a6abfe7973d6adad79c0d5a69da5fc0c8ea74 --hash=sha256:067ef67c2876aadc7654b33916d076ef15b162cc6eacee621d8ddc1bd5717cb7
 flit-core==3.9.0 --hash=sha256:5b9ab0f0009e02f80bb59c27d57a3cf160cca6375d074cafd0ea84f0d342be31
 packaging==24.1 --hash=sha256:a5d5fa1aaade614246beb5d96d7bf502a03bbd2373ed4a4fc70eed3e7ce790a0
-pip==24.1.2 --hash=sha256:45941b49b443d67e8f2c820b4fa9d4aa916326f897abfa1068914f1b0ebc6eb2
+pip==25.0 --hash=sha256:9f14119871fcea0b751e28e232e258554d4f54f1bbcd48ba0b3c7b8babbeb8c9
 pyproject-hooks==1.1.0 --hash=sha256:1058f6b6ac3f83e7220aef532e4357ce45416160b270c787788975d32ed11eb1
 pytest-runner==5.3.0 --hash=sha256:3084ada00452395171c8f10199d2b5d3b74c6948518c2b6bd75e948c77ca2280
 setuptools==70.3.0 --hash=sha256:663e40f0f62eed3ee04ec66d5a8bb2c36a365b98639bf52f050a2a857a704e38

diff --git a/workstation-bootstrap/poetry.lock b/workstation-bootstrap/poetry.lock
diff --git a/workstation-bootstrap/pyproject.toml b/workstation-bootstrap/pyproject.toml
@@ -10,7 +10,7 @@ readme = "README.md"
 python = "^3.11"
 build = "1.2.1"
 wheel = "0.38.1"
-pip = "24.1.2"
+pip = "^25.0"
 setuptools = "70.3.0"
 setuptools-scm = "8.1.0"
 pytest-runner = "5.3.0"

diff --git a/workstation-bootstrap/sha256sums.txt b/workstation-bootstrap/sha256sums.txt
@@ -15,12 +15,8 @@ a5d5fa1aaade614246beb5d96d7bf502a03bbd2373ed4a4fc70eed3e7ce790a0  packaging-24.1
 026ed72c8ed3fcce5bf8950572258698927fd1dbda10a5e981cdf0ac37f4f002  packaging-24.1.tar.gz
 bfe04a1859fd3cbd3bc2a1ffd2a6dbf30e912bf7fc36ed55d4c838d642c55934  pep517-0.9.1-py2.py3-none-any.whl
 aeb78601f2d1aa461960b43add204cc7955667687fbcf9cdb5170f00556f117f  pep517-0.9.1.tar.gz
-f266816461e421e2bbdb61e6e122d01fe638b5710698879ab283cc456aabd1d1  pip-21.0.1-py3-none-any.whl
-99bbde183ec5ec037318e774b0d8ae0a64352fe53b2c7fd630be1d07e94f41e5  pip-21.0.1.tar.gz
-6934731b2bc2162636cf88173c73bf2318d78fe5793be14f5d4634a526fdb5c2  pip-21.3.1-py3-none-any.whl
-fd11ba3d0fdb4c07fbc5ecbba0b1b719809420f25038f8ee3cd913d3faa3033a  pip-21.3.1.tar.gz
-45941b49b443d67e8f2c820b4fa9d4aa916326f897abfa1068914f1b0ebc6eb2  pip-24.1.2-py3-none-any.whl
-e5458a0b89f2755e0ee8c0c77613fe5273e05f337907874d64f13171a898a7ff  pip-24.1.2.tar.gz
+9f14119871fcea0b751e28e232e258554d4f54f1bbcd48ba0b3c7b8babbeb8c9  pip-25.0-py3-none-any.whl
+8e0a97f7b4c47ae4a494560da84775e9e2f671d415d8d828e052efefb206b30b  pip-25.0.tar.gz
 4d00a1a6d2bf41a459fa6f47d41a1c5d157715283c2dc4a4b291972037bc9620  pyparsing-2.4.7-py2.py3-none-any.whl
 c203ec8783bf771a155b207279b9bccb8dea02d8f0c9e5f8ead507bc3246ecc1  pyparsing-2.4.7.tar.gz
 1058f6b6ac3f83e7220aef532e4357ce45416160b270c787788975d32ed11eb1  pyproject_hooks-1.1.0-py3-none-any.whl
@@ -39,7 +35,5 @@ ed687948d45961dba39e0931955234cce9e42fcfc3da1c8a635c2abbebd1d15e  setuptools_scm
 42dea1b65771cba93b7a515d65a65d8246e560768a66b9106a592c8e7f26c8a7  setuptools_scm-8.1.0.tar.gz
 931471fdf4a532e4095922de7eb81ef13da584d91af4f93e2e7284b29f56a65b  toml-0.10.2-py2.py3-none-any.whl
 b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f  toml-0.10.2.tar.gz
-870fcd67bd55da8e73be17468e970d365ad926ac9c5fee0e00ad778019c579d9  wheel-0.36.2-py2.py3-none-any.whl
-e11eefd162658ea59a60a0f6c7d493a7190ea4b9a85e335b33489d9f17e0245e  wheel-0.36.2.tar.gz
 137763d8bee337a83e407c9c5df0aa829aef964421ec072682ba39f66d4b70f4  wheel-0.38.1-py3-none-any.whl
 ea041edf63f4ccba53ad6e035427997b3bb10ee88a4cd014ae82aeb9eea77bb9  wheel-0.38.1.tar.gz
diff --git a/workstation-bootstrap/sha256sums.txt.asc b/workstation-bootstrap/sha256sums.txt.asc
@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCAAdFiEETASaYTBMr1LMpavPW6rc/l76p9EFAmc+aP4ACgkQW6rc/l76
-p9FBkg/8DSoYQPBO5IYLMM6TwyCTEKvOT/Arlp3RjrXynUg6+UxgjNspn2hRm71R
-bUF4Lc8hK7kPeIW6+B3JRR/mITBlhPq0OOjjTFFX2TqTZb7quZu/Ewq1YZNA2Br7
-iLyzxgiGKDFbuRgZ5moXqf3goJ9tVa7Y+IGnTJ/f0qCKSwxGi44BTwoQeX1Ntzgg
-l4k3WN+v0a2+wGoesELcRnPLgMh3RfojFpnckofnCj9MbwCsx41uv0yGXvu1c2v0
-ZRkzTTDCWfcGfPzD8BeHy2f23LdfwSSIRHH0tdWTRNwNl+ZXh4teySt/cFORnG1u
-iD++Fb7/WQF7/8F/mMO6mRsIsUSMCEw5I1jjOlB8ebrmPHvHTpWWHGH69fiBZTly
-JjZ1MO3aWbfxAfAFS8aPAHJKoT0YemexlGRxhayYhrzV/roQm2Yut98XMLDkigR6
-QHhpLqOiBT5Y0RlGBAzco1phcDNONgI5xLc86sy9CRznqEDCyULabtFRi529xScy
-dIXDVOApiQtUxx/NV+0+arjW5Q3FkJFO9BVwVAZiCXe6jBRNcq/TeZGDVCHA1T4A
-TddkUGNnVU3wL0PKwysFlHTXxbpqoap49MCcd+beOKUptIQlmXYnzvoDGzKRNSLJ
-XeI6cN9cb+pLJW2JZizzcbPv082IGUUQGCO5BaskpxfQVHPH5h8=
-=YLvS
+iQIzBAABCAAdFiEETASaYTBMr1LMpavPW6rc/l76p9EFAmedDQcACgkQW6rc/l76
+p9GwLxAAqKKPLDqWDncmqMBI8FMpoSUnENQoKLAVNBC5c5s4FymMuSaG9HvrTmmZ
+P3vA+gAJvTHnf0cbYoSshmAtj4R3l4o7WEP5n2ASBzoDu34bjgUR/rCJUXbbtEeL
+UXyCgvPEuzSY60zpTJgS+wdmsUr0gqFt+1Nxm/53utkMrfTxp8eIYjqyHnlXg9yN
+z+BddovvMJejpfhIPv9IUB0nVZdWHUCO5u9xVNu7dhlqIre4KDe7mZHJ2XgJ4ZAR
+suiw/wCJp9vKafJ2HBZHA3UdCSXBHSX4yk0z6l1cfTKhivv9ZSXqi92I1Z0Wdtac
+ba3Zp163L6AXdsA9Ibdf7f/e4sn72IlULDASPvpu0pLfBz8SOrsoET5OBjqTOgqc
+qYUKSD5XxANhJBjFHKWjUNH+nQLAfgUpamjjhygeCGSIHVNEx0MBxvXIknybuJEO
+cDFIOPzfeIkJEgL9odZP5g1pDUo4Ia07+pYcbrvO28XYwzjxQPO13rMzOYFt38Hi
+CNsEE56xlqsxhY5b4WMiTc+LJJ9dx6VdNm0pp7RhkY5RU52pvwV5DV6Y3i98wpCP
+rPbtTnHAP5xaGIoM9MifCmjTjkBywX+mWbC1FWLTELzAWmmLyuuSl5yRjYLE8W0/
+6MlPi1B5QWTKNpoIKJ9GbW0JKZi78siEYJyuJEfEgH5HkRybEEI=
+=VWul
 -----END PGP SIGNATURE-----
diff --git a/workstation-bootstrap/wheels/pip-21.0.1-py3-none-any.whl b/workstation-bootstrap/wheels/pip-21.0.1-py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/pip-21.0.1.tar.gz b/workstation-bootstrap/wheels/pip-21.0.1.tar.gz
diff --git a/workstation-bootstrap/wheels/pip-21.3.1-py3-none-any.whl b/workstation-bootstrap/wheels/pip-21.3.1-py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/pip-21.3.1.tar.gz b/workstation-bootstrap/wheels/pip-21.3.1.tar.gz
diff --git a/workstation-bootstrap/wheels/pip-24.1.2-py3-none-any.whl b/workstation-bootstrap/wheels/pip-24.1.2-py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/pip-24.1.2.tar.gz b/workstation-bootstrap/wheels/pip-24.1.2.tar.gz
diff --git a/workstation-bootstrap/wheels/pip-25.0-py3-none-any.whl b/workstation-bootstrap/wheels/pip-25.0-py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/pip-25.0.tar.gz b/workstation-bootstrap/wheels/pip-25.0.tar.gz