OCHA-DAP / hdx-python-database / 40441271858

95%

main: 95%

Pull #25

github

Security fixes and dependency upgrades

- Upgrade locked dependencies to clear known CVEs (cryptography, certifi,
  urllib3, mkdocs-material, pymdown-extensions, virtualenv, filelock)
- Require cryptography>=48.0.1 in sshtunnel extra (bundled OpenSSL fix)
- Warn when ssh_host_key is not supplied (no SSH server verification)
- URL-encode username/password in connection URIs and decode when parsing
- Quote view names in CREATE/DROP VIEW
- Make pg_restore file path absolute so it cannot be parsed as an option
- Add optional timeout to wait_for_postgresql (pg_timeout in Database)

19 of 20 new or added lines in 5 files covered. (95.0%)

292 of 308 relevant lines covered (94.81%)

0.95 hits per line