1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/synapse_ynh.git synced 2024-09-03 20:26:38 +02:00

Don't use pipupgrade for now

This commit is contained in:
Josué Tille 2020-04-21 21:03:15 +02:00
parent df50418e76
commit 669be06eaa
No known key found for this signature in database
GPG key ID: 716A6C99B04194EF

View file

@ -161,18 +161,9 @@ then
# We set all necessary environement variable to create a python virtualenvironnement.
source $final_path/bin/activate
pip3 install --upgrade setuptools wheel pipupgrade
pip3 install --upgrade setuptools wheel
pip3 install --upgrade cffi ndg-httpsclient psycopg2 lxml jinja2
# Some pip package could be outdated and pip wont upgrade it automatically.
# This could be a security issue when some package have a vulnerability.
# It was by example the case with Twisted.
# Actually there are no official way to upgrade all package
# This problem is documented here : https://github.com/pypa/pip/issues/4551
# One best way is actually to use pipupgrade
pipupgrade --yes --pip-path $final_path/bin/pip
pip3 install --upgrade matrix-synapse==$upstream_version matrix-synapse-ldap3
pip3 install --upgrade 'Twisted>=20.3.0' matrix-synapse==$upstream_version matrix-synapse-ldap3
# This function was defined when we called "source $final_path/bin/activate". With this function we undo what "$final_path/bin/activate" does
deactivate