5 commits

Author	SHA1	Message	Date
dependabot[bot]	47755c4e69	GHA: bump actions and pips ... - update action `actions/cache` from 5.0.4 to 5.0.5 - update action `actions/upload-artifact` from 7.0.0 to 7.0.1 - update action `github/codeql-action` from 4.32.4 to 4.35.2 - update action `msys2/setup-msys2` from 2.31.0 to 2.31.1 - update pip `filelock` from 3.25.2 to 3.29.0 - update pip `impacket` to 0.13.0 - update pip `ruff` from 0.15.10 to 0.15.12 Closes #21483 Closes #21482	2026-05-01 21:19:22 +02:00
dependabot[bot]	7203498c6a	GHA: bump the pip-dependencies group across 2 directories with 3 updates ... Closes #19321	2025-11-02 17:10:39 +01:00
Viktor Szakats	e08211b1ca	GHA: bump pip cryptography, relax impacket version requirement ... Bump `cryptography` to a newer version that fixes two known OpenSSL vulnerabilities reported by Dependabot. To make it work, also allow `impacket` 0.11.0, because it allows any pyOpenSSL version, while 0.12.0 pinned it to a single version that happens to be incompatible with the bugfixed `cryptography` version. Also: drop spaces from `requirements.txt` files. Bots don't add them, though they seem to be preferred in the official documentation: https://pip.pypa.io/en/stable/reference/requirements-file-format/ https://github.com/fortra/impacket/blob/impacket_0_11_0/requirements.txt https://github.com/fortra/impacket/blob/impacket_0_12_0/requirements.txt Follow-up to 7d5f8be532 #18708 Closes #18731	2025-09-25 14:22:40 +02:00
Viktor Szakats	7d5f8be532	GHA: use pip requirements.txt with pins, and more venv ... - requirements.txt: shorten copyright headers. - requirements.txt: pin packages to versions. - GHA/windows: use `tests/requirements.txt`. Pick a `cryptography` package version that satifies both `impacket` and pytests dependencies. - GHA/checksrc: move pip deps into a new `requirements.txt`. To make Dependabot detect and bump them. - GHA/checksrc: replace apt packages for python test deps with pip install `tests/**/requirements.txt` to a venv. - GHA/checksrc: use venv and drop `--break-system-packages`. - GHA/linux: fix to actually activate venvs. Follow-up to 2638570241 #15578 - GHA/linux: fixup (did not cause an issue) Follow-up to d75785c7de #18660 - GHA: create venvs later, simplify commands. - GHA: sync pip command-line options, e.g. drop progress-bar, everywhere. Assisted-by: Dan Fandrich Closes #18708	2025-09-25 10:45:30 +02:00
Stefan Eissing	acd82c8bfd	tests/http: more tests with specific clients ... - Makefile support for building test specific clients in tests/http/clients - auto-make of clients when invoking pytest - added test_09_02 for server PUSH_PROMISEs using clients/h2-serverpush - added test_02_21 for lib based downloads and pausing/unpausing transfers curl url parser: - added internal method `curl_url_set_authority()` for setting the authority part of a url (used for PUSH_PROMISE) http2: - made logging of PUSH_PROMISE handling nicer Placing python test requirements in requirements.txt files - separate files to base test suite and http tests since use and module lists differ - using the files in the gh workflows websocket test cases, fixes for we and bufq - bufq: account for spare chunks in space calculation - bufq: reset chunks that are skipped empty - ws: correctly encode frames with 126 bytes payload - ws: update frame meta information on first call of collect callback that fills user buffer - test client ws-data: some test/reporting improvements Closes #11006	2023-04-26 23:24:46 +02:00