Skip to content

Remove unused dead code - #288

Merged
danyi1212 merged 1 commit into
mainfrom
dan/per-12996-pdp-release-pdp-v097
Oct 6, 2025
Merged

Remove unused dead code#288
danyi1212 merged 1 commit into
mainfrom
dan/per-12996-pdp-release-pdp-v097

Conversation

@danyi1212

Copy link
Copy Markdown
Contributor

No description provided.

@danyi1212
danyi1212 requested a review from omer9564 October 6, 2025 12:45
@danyi1212 danyi1212 self-assigned this Oct 6, 2025
@cursor

cursor Bot commented Oct 6, 2025

Copy link
Copy Markdown

You have run out of free Bugbot PR reviews for this billing cycle. This will reset on November 12.

To receive reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

@danyi1212
danyi1212 merged commit d8bd7ed into main Oct 6, 2025
5 checks passed
@danyi1212
danyi1212 deleted the dan/per-12996-pdp-release-pdp-v097 branch October 6, 2025 12:50
dshoen619 added a commit that referenced this pull request Jul 5, 2026
CI pytests started failing with:
  TypeError: ClientResponse.__init__() missing 1 required keyword-only
  argument: 'stream_writer'

aiohttp 3.14 made stream_writer a required kwarg of ClientResponse.__init__,
which the latest released aioresponses (0.7.9) does not pass. aiohttp/
aioresponses are unpinned so CI installs the latest, and this surfaced once
aiohttp 3.14 shipped -- unrelated to this PR's dependency bumps.

We stay on aiohttp 3.14.x on purpose: the June 2026 aiohttp security fixes
landed in 3.14 and were not backported to 3.13.x, so pinning aiohttp down to
satisfy aioresponses would reintroduce those CVEs into the image. Instead add
a test-only conftest shim (mirrors upstream aioresponses PR #288, unreleased)
that injects a dummy stream_writer. No-op on aiohttp < 3.14.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
dshoen619 added a commit that referenced this pull request Jul 7, 2026
* fix(deps): bump cryptography to 48.0.1 to patch GHSA-537c-gmf6-5ccf (PER-15358)

Docker Scout flagged cryptography 46.0.7 (1 High) in the pdp-v2 image.
Bump the pin from >=46.0.5,<47 to >=48.0.1,<49; resolves cleanly against
the rest of the tree (fastapi 0.125.0, opal 0.9.6).

Also documents that the two starlette High CVEs (CVE-2026-54283,
CVE-2026-48818; fixed in starlette 1.1.0/1.3.1) are blocked upstream:
opal-common/opal-client 0.9.6 (latest) hard-cap starlette<1.

The 18 Go CVEs (all Criticals) are fixed in permit-opa#38.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test: fix aioresponses incompatibility with aiohttp 3.14 (PER-15358)

CI pytests started failing with:
  TypeError: ClientResponse.__init__() missing 1 required keyword-only
  argument: 'stream_writer'

aiohttp 3.14 made stream_writer a required kwarg of ClientResponse.__init__,
which the latest released aioresponses (0.7.9) does not pass. aiohttp/
aioresponses are unpinned so CI installs the latest, and this surfaced once
aiohttp 3.14 shipped -- unrelated to this PR's dependency bumps.

We stay on aiohttp 3.14.x on purpose: the June 2026 aiohttp security fixes
landed in 3.14 and were not backported to 3.13.x, so pinning aiohttp down to
satisfy aioresponses would reintroduce those CVEs into the image. Instead add
a test-only conftest shim (mirrors upstream aioresponses PR #288, unreleased)
that injects a dummy stream_writer. No-op on aiohttp < 3.14.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* ci: run pdp-tester via Docker runtime instead of k3d (PER-15358)

The pdp-tester job failed at the "Start k3d cluster" step:
  Downloading k3d@v5.4.6 ... curl: (22) ... error: 404
  Failed to install k3d

AbsaOSS/k3d-action@v2.4.0 defaults to k3d v5.4.6, whose GitHub release has
no checksums.txt; k3d's install.sh now SHA256-verifies the binary against
that file, so the download 404s. This is environmental (passed on main in
May) and unrelated to this PR.

Per the pdp-tester maintainers, switch the job to the tester's new Docker
runtime backend (aiodocker), which launches the PDP as a local container
with no k3d/Helm/kubectl -- mirroring pdp-tester's own `pdp-tester-docker`
CI job. LOCAL_IMAGE pins it to the locally built permitio/pdp-v2:next image
(loaded from the build artifact) so nothing is pulled from Docker Hub.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants