Release 2021.06.07

With these updates, we have completed the release of 2021.06.07

Features

• Implemented handling of packages - selecting which packages should be analyzed by Thoth by maintaining solver rules: #1403

management-api: >0.17.0
adviser: >=0.31.0

• Using PyPA's advisory-db as a source of security vulnerabilities: thoth-station/cve-update-job#404

cve-update-job: >=0.3.0
adviser: >=0.31.0

As this change required database schema changes, all the components that talk to the database need thoth-storages>=0.44.0 (updates propagated, new releases pending).

Component Updates

• adviser: v0.31.0

  • Keep CVE advisory in the justification output (thoth-station/adviser#1882)
  • Adjust for CVEs consumed from PyPA (thoth-station/adviser#1876)
  • Add a sieve implementing filtering based on solver rules (thoth-station/adviser#1877)
  • Document solver rules (thoth-station/adviser#1878)
  • Add video demonstrating constaints.txt use (thoth-station/adviser#1870)
  • Handle error when all the direct deps are sieved (thoth-station/adviser#1867)
  • Make boot pipeline unit responsible for providing stack info (thoth-station/adviser#1863)
  • Report all unresolved dependencies (thoth-station/adviser#1864)

• management-api: v0.17.2

  • Delete solver rules endpoint returns a single rule delete (thoth-station/management-api#770)
  • Fix module not found error for flask._compat (thoth-station/management-api#763)
  • Create endpoints for managing Python solver rules (thoth-station/management-api#757)

• investigator: v0.13.0

  • loop being deprecated, use asyncio.run instead (thoth-station/investigator#514)
  • remove thoth-sourcemanagement from dependencies (thoth-station/investigator#521)

• solver: v1.9.0

  • Raise on exit code propagating a signal from operating system (thoth-station/solver#704)
  • Compute packages available in analyzed Python package release (thoth-station/solver#701)
  • Metadata now gather also description (thoth-station/solver#707)
  • Provide an ability to limit output (thoth-station/solver#696)
  • Improvements to docs (thoth-station/solver#694)

• cve-update-job: v0.3.0

  • Add metrics for CVE update job (thoth-station/cve-update-job#410)
  • Start using pypa/advisory-db as a source of CVEs (thoth-station/cve-update-job#405)
  • upgrade the service to python3.8 (thoth-station/cve-update-job#393)
  • cve-update-job upgrade to be kafka message producer (thoth-station/cve-update-job#374)

• kebechet: v1.3.0

  • remove thoth-sourcemanagement from Kebechet (thoth-station/kebechet#725)
  • add kebechet metadata when sending request to thamos (thoth-station/kebechet#699)
  • add justification based on metadata if possible (thoth-station/kebechet#698)

• revsolver: v0.2.5

  • Add standard GitHub templates (thoth-station/revsolver#49)

Thanks, everyone for the work.