[UPD] poetry: version 1.1.12

- Update security issue, pyyaml 6.0, urllib3 1.26.8

.gitignore

@@ -18,3 +18,5 @@ doc/odoo*
 script/OCA*
 odoo
 image_db
+get-poetry.py
+artifacts

poetry.toml

@@ -1,5 +1,5 @@
 cache-dir = "./"
 [virtualenvs]
 create = false
-in-project = false
+in-project = true
 path = "{cache-dir}.venv"

pyproject.toml

@@ -19,47 +19,51 @@ authors = [ "Mathieu Benoit <mathben@technolibre.ca>",]
 
 [tool.poetry.dependencies]
 python = "^3.7.12"
-Asterisk = "^0.0.8"
 Babel = "2.9.1"
-BeautifulSoup4 = "^4.10.0"
+Cerberus = "^1.3.4"
+Cython = "^0.29.26"
 GitPython = "3.1.12"
 Jinja2 = "2.11.3"
+Js2Py = "^0.71"
 Mako = "1.0.4"
 MarkupSafe = "0.23"
 Pillow = "9.0.0"
 PyJWT = "1.7.1"
+PyMySQL = "^1.0.2"
 PyPDF2 = "1.26.0"
-PyYAML = "4.2b4"
+PyYAML = "6.0"
 SOAPpy = "^0.12.22"
+SQLAlchemy = "^1.4.31"
+Shapely = "1.6.4.post2"
 Sphinx = ">=2.4.0"
+Unidecode = "1.0.22"
 Voicent-Python = "^1.0"
 Werkzeug = "0.11.15"
 XlsxWriter = "0.9.3"
 agithub = "^2.2.2"
 altair = "^4.2.0"
 argcomplete = "^2.0.0"
+asterisk = "^0.0.8"
 astor = "^0.8.1"
+beautifulsoup4 = "^4.10.0"
 bokeh = "1.1.0"
-boto3 = "1.9.102"
+boto3 = ">=1.20.41"
 cachetools = ">=2.0.1"
-cerberus = "^1.3.4"
 chardet = "3.0.4"
 click = "^8.0.3"
 cloudflare = "^2.8.15"
-code_writer = "^1.1.1"
+code-writer = "^1.1.1"
 colorama = "^0.4.4"
-cryptography = "3.4.8"
+cryptography = "36.0.1"
 css-html-prettify = "^2.5.5"
-cython = "^0.29.26"
 ddt = "1.2.0"
 decorator = "4.0.10"
-docutils = "0.16"
+docutils = "0.17.1"
 ebaysdk = "2.1.5"
-email_validator = "^1.1.3"
+email-validator = "^1.1.3"
 emoji = "^1.6.3"
 escpos = "^1.9"
 extract-msg = "^0.30.0"
-extract_msg = "^0.30.0"
 factur-x = "^2.3"
 feedparser = "5.2.1"
 flake8 = "^4.0.1"
@@ -75,7 +79,6 @@ invoice2data = "^0.3.6"
 iscompatible = "^0.1.1"
 isort = "^5.10.1"
 jira = "2.0.0"
-js2py = "^0.71"
 keystoneauth1 = "3.14.0"
 lasso = "^0.0.5"
 libsass = "0.12.3"
@@ -87,11 +90,11 @@ mysqlclient = "^2.1.0"
 num2words = "0.5.6"
 numpy = "1.21.1"
 oauthlib = "2.1.0"
-"oca.decorators" = "^0.0.1"
+oca-decorators = "^0.0.1"
 ofxparse = "0.16"
 openpyxl = "^3.0.9"
 openupgradelib = "^3.3.1"
-pandas = "1.2.0"
+pandas = "1.3.5"
 paramiko = "^2.9.2"
 passlib = "1.6.5"
 pdf2image = "^1.16.0"
@@ -100,19 +103,18 @@ pexpect = "^4.8.0"
 phonenumbers = "^8.12.41"
 plotly = "4.1.0"
 premailer = "^3.10.0"
-psutil = "5.6.6"
+psutil = "5.9.0"
 psycopg2 = "2.7.3.1"
 py-Asterisk = "^0.5.18"
 "py3o.formats" = "^0.3"
 "py3o.template" = "^0.10.0"
 pycountry = "^22.1.10"
-pycrypto = "^2.6.1"
+pycrypto = "2.6.1"
 pydot = "1.2.3"
 pygount = "<1.2.0"
 pyjsparser = "^2.7.1"
 pyldap = "2.4.28"
-pymssql = "^2.2.3"
+pymssql = "^2.2.4"
-pymysql = "^1.0.2"
 pyotp = "^2.6.0"
 pyparsing = "2.1.10"
 pyproj = "3.2.1"
@@ -128,39 +130,34 @@ python-slugify = ">=3.0.2"
 python-stdnum = "^1.17"
 python-swiftclient = "3.9.0"
 python-u2flib-server = "^5.0.1"
-python-u2flib_server = "^5.0.1"
 pytz = "2017.3"
 pyusb = "1.0.0"
 pyzbar = "^0.1.8"
 qrcode = "5.3"
 raven = "^6.10.0"
 redis = "2.10.5"
-reportlab = "3.3.0"
+reportlab = "3.6.5"
-requests = "2.20.0"
+requests = "2.27.1"
 requests-mock = "^1.9.3"
 requests-oauthlib = "1.1.0"
 requests-toolbelt = "0.9.1"
 retrying = "^1.3.3"
 serial = "^0.0.97"
-shapely = "1.6.4.post2"
 simplejson = "^3.17.6"
 slugify = "^0.0.1"
-sphinx = ">=1.6.7"
 sphinx-intl = "^2.0.1"
 sphinx-patchqueue = ">=1.0"
-sphinx_rtd_theme = "^1.0.0"
+sphinx-rtd-theme = "^1.0.0"
-sqlalchemy = "^1.4.31"
 statsd = "3.2.1"
 suds-jurko = "0.6"
 toml = "^0.10.2"
 twython = "^3.9.1"
-unidecode = "1.0.22"
 unidiff = "^0.7.0"
+urllib3 = "1.26.8"
 vatnumber = "1.2"
 vcrpy = ">=2.1.1"
 vcrpy-unittest = "^0.1.7"
 vobject = "0.9.3"
-voicent-python = "^1.0"
 webcolors = "1.10"
 websocket-client = "^1.2.3"
 wechatpy = "^1.8.18"

requirements.txt

@@ -8,6 +8,7 @@ xmltodict
 openupgradelib
 unidiff
 colorama
+wheel
 
 # For OSX
 cython
@@ -33,7 +34,7 @@ python-swiftclient
 python-keystoneclient
 
 # For logical test
-docutils==0.16
+docutils==0.17.1
 flake8
 git+https://github.com/oca/pylint-odoo.git
 # oca-maintainers-tools
@@ -48,7 +49,8 @@ isort
 # For updating poetry
 toml
 iscompatible
-pandas==1.2.0
+pandas==1.3.5
+Jinja2==2.11.3
 
 # For deployment
 cloudflare
@@ -66,14 +68,18 @@ pyproj==3.2.1
 # Force update dependency to fix poetry
 numpy==1.21.1
 
-# Force version for security update
+# Security issue, need to update to version =>0.15.3, but odoo12 is only support ==0.11.15
-# Not pyyaml, break by camptocamp_odoo-cloud-platform
-# error with 5.x (ConstructorError: could not determine a constructor for the tag '!record')
-# pyyaml==5.4
-Jinja2==2.11.3
-lxml==4.7.1
-cryptography==3.4.8
-psutil==5.6.6
-Pillow==9.0.0
 Werkzeug==0.11.15
+
+# Force version for security update
+pyyaml==6.0
+lxml==4.7.1
+cryptography==36.0.1
+psutil==5.9.0
+Pillow==9.0.0
 Babel==2.9.1
+reportlab==3.6.5
+pycrypto==2.6.1
+urllib3==1.26.8
+requests==2.27.1
+boto3>=1.20.41

script/install_locally.sh

@@ -33,7 +33,7 @@ VENV_PATH=./.venv
 LOCAL_PYTHON_EXEC=${VENV_PATH}/bin/python
 VENV_REPO_PATH=${VENV_PATH}/repo
 VENV_MULTILINGUAL_MARKDOWN_PATH=${VENV_PATH}/multilang_md.py
-POETRY_VERSION=1.0.10
+POETRY_VERSION=1.1.12
 
 echo "Python path version home"
 echo ${PYENV_VERSION_PATH}
@@ -109,6 +109,7 @@ ${VENV_PATH}/bin/pip install --upgrade pip
 # Force python instead of changing env
 #/home/"${USER}"/.poetry/bin/poetry env use ${LOCAL_PYTHON_EXEC}
 # source $HOME/.poetry/env
+${LOCAL_PYTHON_EXEC} ~/.poetry/bin/poetry env use ${VENV_PATH}/bin/python3
 ${LOCAL_PYTHON_EXEC} ~/.poetry/bin/poetry install
 retVal=$?
 if [[ $retVal -ne 0 ]]; then