diff --git a/scripts/upgrade b/scripts/upgrade index ec2c04f..cf4ba14 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -161,18 +161,9 @@ then # We set all necessary environement variable to create a python virtualenvironnement. source $final_path/bin/activate - pip3 install --upgrade setuptools wheel pipupgrade + pip3 install --upgrade setuptools wheel pip3 install --upgrade cffi ndg-httpsclient psycopg2 lxml jinja2 - - # Some pip package could be outdated and pip wont upgrade it automatically. - # This could be a security issue when some package have a vulnerability. - # It was by example the case with Twisted. - # Actually there are no official way to upgrade all package - # This problem is documented here : https://github.com/pypa/pip/issues/4551 - # One best way is actually to use pipupgrade - pipupgrade --yes --pip-path $final_path/bin/pip - - pip3 install --upgrade matrix-synapse==$upstream_version matrix-synapse-ldap3 + pip3 install --upgrade 'Twisted>=20.3.0' matrix-synapse==$upstream_version matrix-synapse-ldap3 # This function was defined when we called "source $final_path/bin/activate". With this function we undo what "$final_path/bin/activate" does deactivate