Merge branch 'main' into dependabot/pip/grpcio-1.53.0

ServiceNow · Aug 1, 2023 · 4af0ef1 · 4af0ef1
2 parents ecdf028 + 3f67788
commit 4af0ef1
Show file tree

Hide file tree

Showing 6 changed files with 63 additions and 49 deletions.
diff --git a/.github/workflows/pythonci.yml b/.github/workflows/pythonci.yml
@@ -19,14 +19,14 @@ jobs:
         with:
           python-version: 3.9
       - uses: Gr1N/setup-poetry@v8
-      - uses: actions/cache@v2
+      - uses: actions/cache@v3
         with:
           path: ~/.cache/pypoetry/virtualenvs
           key: ${{ runner.os }}-poetry-${{ hashFiles('poetry.lock') }}
       - run: poetry --version
       - name: Install dependencies
         run: |
-          poetry install --extras cpu --no-interaction --no-ansi
+          poetry install --without dev,docs --extras cpu --no-interaction --no-ansi
       - name: Test with pytest/flake8/mypy
         env:
           PYTEST_ADDOPTS: "--color=yes"

diff --git a/Dockerfile b/Dockerfile
@@ -34,11 +34,11 @@ COPY poetry.lock pyproject.toml /app/
 
 WORKDIR /app
 RUN poetry config virtualenvs.create false && \
-  poetry install --extras ${DEVICE} --no-interaction --no-ansi --no-root $(/usr/bin/test $STAGE == production && echo "--no-dev")
+  poetry install --extras ${DEVICE} --no-interaction --no-ansi --no-root $(/usr/bin/test $STAGE == production && echo "--without dev,test,docs")
 
 # Install the project.
 COPY . /app/
-RUN poetry install --extras ${DEVICE} --no-interaction --no-ansi $(/usr/bin/test $STAGE == production && echo "--no-dev")
+RUN poetry install --extras ${DEVICE} --no-interaction --no-ansi $(/usr/bin/test $STAGE == production && echo "--without dev,test,docs")
 ENV CFG_PATH=
 ENV LOAD_CONFIG_HISTORY=
 ENV PORT=

diff --git a/README.md b/README.md
@@ -137,3 +137,6 @@ To contact us, join our [slack](https://join.slack.com/t/azimuth-org/shared_invi
 ## License
 
 The package is licensed by ServiceNow, Inc. under the Apache 2.0 license. See [LICENSE](LICENSE) for more details.
+
+## Vulnerability Reporting
+Please notify psirt-oss@servicenow.com regarding any vulnerability reports in addition to following current reporting procedure.
diff --git a/docs/docs/getting-started/changelog.md b/docs/docs/getting-started/changelog.md
@@ -1,6 +1,6 @@
 # Releases
 
-## [2.8.0] - 2023-07-TODO
+## [2.8.0] - 2023-07-06
 
 ### Added
 - Config UI:

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -25,7 +25,7 @@ onnx = "^1.12.0"
 onnxruntime-extensions = "0.3.1"
 onnxruntime = { version = "1.12.1", optional = true }
 onnxruntime-gpu = { version = "1.12.1", optional = true }
-scipy = "^1.6.3"
+scipy = "^1.10.0"
 spectral-metric = "0.6.1"
 torch = { version = "1.13.1", source = "PyPI" }
 numpy = "1.23.5"
@@ -63,32 +63,40 @@ cpu = ["onnxruntime"]
 gpu = ["onnxruntime-gpu"]
 
 [tool.poetry.group.dev.dependencies]
+jupyterlab = "^3.0.5"
+ipywidgets = ">=7.6"
+matplotlib = "^3.4.1"
+bokeh = "<3"
+pyinstrument = "^4.3.0"
+memory-profiler = "^0.61.0"
+
+# Rare dependencies for specific experiments in notebooks
+[tool.poetry.group.experimental]
+optional = true
+
+[tool.poetry.group.experimental.dependencies]
+umap-learn = "^0.5.1"
+hdbscan = "^0.8.27"
+seaborn = "0.11.2"
+
+[tool.poetry.group.test.dependencies]
 pytest = "^6.0"
 pytest-cov = "2.11.1"
 pytest-env = "^0.6.2"
 flake8 = ">=3.8"
 flake8-black = "0.2.4"
-jupyterlab = "^3.0.5"
-ipywidgets = ">=7.6"
 black = ">=20.8b1"
 mypy = "^0.910"
 bandit = "^1.7.0"
-matplotlib = "^3.4.1"
-umap-learn = "^0.5.1"
-seaborn = "0.11.2"
-hdbscan = "^0.8.27"
 pre-commit = "^2.15.0"
 isort = "^5.9.3"
 types-simplejson = "^3.17.0"
 types-filelock = "^0.1.5"
 types-orjson = "^3.6.0"
-pyinstrument = "^4.3.0"
-bokeh = "<3"
 
-# Documentation
+[tool.poetry.group.docs.dependencies]
 mkdocs = "^1.2.3"
 mkdocs-material = "^8.1.7"
-memory-profiler = "^0.61.0"
 
 [build-system]
 requires = ["poetry-core>=1.0.0"]