This library is an abstraction for Splunk-related development, maintenance, or migration operations

Last update: Dec 21, 2022

Overview

Splunk Management Utility

🤝 Show your support - give a ⭐️ if you liked the tool | Share on

| Follow us on

This library is an abstraction for Splunk-related development, maintenance, or migration operations. It provides a single CLI or SDK to conveniently perform various operations such as managing a local development container, retrieving sample-data, building applications, comparing instances, managing knowledge objects and hopefully much more in the future.

Motivation 🔥

When I work with Splunk, my working directory is usually in the same layout. I work with a mono-repository or a higher-level one with submodules, which contains several applications and configuration. This can look generalized like this:


   
    
├── apps                          # Folder where to store applications
│   └── Defender_TA_nxtp          # Generic custom Splunk app
├── dist                          # Place for built packages and reports
├── scripts
├── config                        # Settings and secrets
│   └── settings.yaml             # General purpose settings for this lib
│   └── .secrets.yaml             # API settings for connections and secrets
└── share                         # Custom splunkbase or builtin app content

We have all found our ways and methods to develop applications on an instance and to configure and operate that instance to meet our needs and/or those of our customers. But what is usually rather painful is when we then need them on other instances as well. A good example are test instances, which should be as close to production as possible. However, in the last few years that I have been dealing as a user with Splunk, some needs for simplified handling and automation have emerged that I would like to address here.

We want to ...

Spin up a local development container:
```
spl docker start
```
Put my local application(s) there for testing purposes:
```
spl docker upload --app="Defender*"
```

Get sample data for Eventgen:

spl --src="onprem"  samples --path="./apps/SA-Eventgen" download --name="WinDefender"

(De)activate streaming of event data.
Download apps from development container to local folder:
```
spl docker download --app="Defender*"
```
Run AppInspect, Packaging, etc.:
```
spl apps --name="Defender_TA*" validate
```
List various objects on an instance:
```
spl manager --conn="onprem" users list
```

Create or modify objects on an instance:

spl manager --conn="onprem" roles update --name "investigator"

Sync objects and their properties from one instance to another:

spl --src="onprem" --dest="localhost" sync users --create --update

and probably much more, so pull requests are welcome!

Getting Started 🚀

You can download the package from the package feed via pip install spl-manager or install from source with poetry after cloning the repository.

Then you can issue your first command to get the help page:

python -m spl -h

or poetry run python -m spl -h. Anyhow it's recommended to set the alias spl="python -m spl for easier handling.

You have to create a config\.secrets.yaml file by using the config\template.secrets.yaml file, which contains the credentials for the Development Docker-Container and Splunkbase.

Using the library 📚

Please note that, when using the library as an SDK you need to pass the interactive=False flag to not run into issues because in interactive mode it asks for user inputs via CLI methods.

from spl import SplManager

spl = SplManager(interactive=False)

Using the CLI 🧑‍💻

If you wish to get more information about any command within spl, you can pass the -h parameter.

Top-level `spl` Options

--interactive: Wether or not to run in interactive mode.
--src: The name of the source connection provided in settings.
--dest: The name of the destination connection provided in settings.

Top-level `spl` Modules

connections provides you a list of connections available via configuration.
docker helps you to manage the local splunk container instance.
apps abstracts the handling of local application folders at a given --path and helps with validation, packaging, vetting, etc.
samples are based on the configured queries for a --conn or --src and can download results and store them automatically at a --path to use for SA-Eventgen.
manager acts as a direct ConnectionAdapter interface for the specified --conn parameter.
sync will handle managers for --src and --dest connections, enabling you to compare, move and update between those instances.

🔗 References

🤩 Support

or send us some crypto:

Protocol	Address
Ethereum	`0xcFC6Bdb68FB219de754D01BcD34F8A339549C910`
Avalanche	`X-avax1vlrw8m9af5p4kx2zxc4d5lqmgh8c86uduwprg6`
Harmony	`one18fcze47fll6662ggr760u9jm3rfz859jkv7vyw`
Binance Chain	`bnb1q6zg3pnmclnfhy6vtldfd0az97l0ndayun2tzn`
Binance Smart Chain	`0x1CD0ca3eC911Fe9661905Dd500FBaCE245c7013f`
Solana	`Eh35fdT6gdMHcsj3TrTMnNDSgvWAEMc11Zhz9R96F7aB`

Comments

Bump dynaconf from 3.1.8 to 3.1.11

Bumps dynaconf from 3.1.8 to 3.1.11.

Release notes

Sourced from dynaconf's releases.

3.1.11

Dynaconf 3.1.11

Amadou Crookes (1):
      envars.md typo fix ([#786](https://github.com/dynaconf/dynaconf/issues/786))
Bruno Rocha (19):
Release version 3.1.9
Bump dev version to 3.1.10
Update badges
demo repo will be replaced by a video tutorial soon
Fix CI
New data key casing must adapt to existing key casing (#795)
Add test and docs about includes (#796)
Removed vendor_src folder (#798)
Replacing rochacbruno/ with dynaconf/ (#800)
Fix codecov (#801)
Parse negative numbers from envvar Fix #799 and Fix #585 (#802)
Fix get command with Django (#804)
Add a functional test runner (#805)
Test runner docs and styling (#806)
Allow merge_unique on lists when merge_enabled=True (#810)
Rebind current env when forced for Pytest Fix #728 (#809)
AUTO_CAST can be enabled on instance (#811)
Ensure pyminify is on release script
Add missing tomllib to monify script
Gaurav Talreja (1):
Fix #807 Use client.auth.approle.login instead of client.auth_approle (#808)
Jitendra Yejare (1):
Fix #768 of kv property depreciation from client object (#769)
Joren Retel (2):
Feature/detect casting comb token from converters (#784)
Adding documentation and example to makefile. (#791)
João Gustavo A. Amorim (1):
Add pyupgrade hook (#759)
Kian-Meng Ang (1):
Fix typos (#788)
Lucas Limeira (1):
Using filter_strategy in env_loader to fix #760 (#767)
Nicholas Nadeau, Ph.D., P.Eng (1):
fix: typo (#766)
Oleksii Baranov (2):

... (truncated)

Changelog

Sourced from dynaconf's changelog.

3.1.11 (2022-09-22)

Release version 3.1.11. [Bruno Rocha]

Shortlog of commits since last release:

Bruno Rocha (2):
      Release version 3.1.10
      Release hotfix (no need to run coverage or include tests_functional)

Release hotfix (no need to run coverage or include tests_functional) [Bruno Rocha]

Release version 3.1.10. [Bruno Rocha]

Shortlog of commits since last release:

Amadou Crookes (1):
      envars.md typo fix ([#786](https://github.com/dynaconf/dynaconf/issues/786))
Bruno Rocha (19):
Release version 3.1.9
Bump dev version to 3.1.10
Update badges
demo repo will be replaced by a video tutorial soon
Fix CI
New data key casing must adapt to existing key casing (#795)
Add test and docs about includes (#796)
Removed vendor_src folder (#798)
Replacing rochacbruno/ with dynaconf/ (#800)
Fix codecov (#801)
Parse negative numbers from envvar Fix #799 and Fix #585 (#802)
Fix get command with Django (#804)
Add a functional test runner (#805)
Test runner docs and styling (#806)
Allow merge_unique on lists when merge_enabled=True (#810)
Rebind current env when forced for Pytest Fix #728 (#809)
AUTO_CAST can be enabled on instance (#811)
Ensure pyminify is on release script
Add missing tomllib to monify script
Gaurav Talreja (1):
Fix #807 Use client.auth.approle.login instead of client.auth_approle (#808)
Jitendra Yejare (1):
Fix #768 of kv property depreciation from client object (#769)
Joren Retel (2):
Feature/detect casting comb token from converters (#784)
Adding documentation and example to makefile. (#791)
João Gustavo A. Amorim (1):

... (truncated)

Commits

32644d4 Release version 3.1.11
544913e Release hotfix (no need to run coverage or include tests_functional)
c7a3092 Release version 3.1.10
c0f443c Add missing tomllib to monify script
322ba3c Ensure pyminify is on release script
7836bd5 AUTO_CAST can be enabled on instance (#811)
82114d1 Rebind current env when forced for Pytest Fix #728 (#809)
a7c706f Allow merge_unique on lists when merge_enabled=True (#810)
cacfa29 Fix #807 Use client.auth.approle.login instead of client.auth_approle (#808)
d156022 Fix typos (#788)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies

opened by dependabot[bot] 1

Bump splunk-appinspect from 2.18.0 to 2.26.0
Bumps splunk-appinspect from 2.18.0 to 2.26.0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump pylint from 2.13.7 to 2.15.3
Bumps pylint from 2.13.7 to 2.15.3.

Commits

403dac6 Bump pylint to 2.15.3, update changelog

38e2784 Bump astroid to 2.12.10

f5e168e Fix undefined-loop-variable with NoReturn and Never (#7476)

fbc9e66 Accept a comma-separated list of messages IDs in --help-msg (#7490)

fe3436e False positive global-variable-not-assigned (#7479)

52cf631 [invalid-class-object] Fix crash when class is defined with a tuple

8e05ff6 Fix a crash in the modified-iterating-dict checker involving instance attri...

9b359ad Fix unhashable-member crash when lambda used as a dict key (#7454)

5716ad1 Bump pylint to 2.15.2, update changelog

49b5d5d Upgrade astroid version following 2.12.9 release

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump ipykernel from 6.13.0 to 6.16.0
Bumps ipykernel from 6.13.0 to 6.16.0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump splunk-sdk from 1.6.19 to 1.7.2
Bumps splunk-sdk from 1.6.19 to 1.7.2.

Release notes

Sourced from splunk-sdk's releases.

Release/1.7.2

Version 1.7.2

Minor changes

#482 Special handling related to the semantic versioning of specific Search APIs functional in Splunk Enterprise 9.0.2 and (Splunk Cloud 9.0.2209). These SDK changes will enable seamless transition between the APIs based on the version of the Splunk Enterprise in use

Release/1.7.1

Version 1.7.1

Bug fixes

#471 Fixed support of Load Balancer "sticky sessions" (persistent cookies) [issue#438]

Minor changes

#466 tests for CSC apps

#467 Added 'kwargs' parameter for Saved Search History function

#475 README updates

Release/1.7.0

Version 1.7.0

New features and APIs

#468 SDK Support for splunkd search API changes

Bug fixes

#464 updated checks for wildcards in StoragePasswords [issue#458]

Minor changes

#463 Preserve thirdparty cookies

Release/1.6.20

Version 1.6.20

New features and APIs

#442 Optional retries feature added

#447 Create job support for "output_mode:json" [issue#285]

Bug fixes

#449 Set cookie [issue#438]

#460 Remove restart from client.Entity.disable

Minor changes

#444 Update tox.ini

#446 Release workflow refactor

#448 Documentation changes

#450 Removed examples and it's references from the SDK

Full Changelog: https://github.com/splunk/splunk-sdk-python/compare/1.6.19...1.6.20

Changelog

Sourced from splunk-sdk's changelog.

Version 1.7.2

Minor changes

#482 Special handling related to the semantic versioning of specific Search APIs functional in Splunk Enterprise 9.0.2 and (Splunk Cloud 9.0.2209). These SDK changes will enable seamless transition between the APIs based on the version of the Splunk Enterprise in use

Version 1.7.1

Bug fixes

#471 Fixed support of Load Balancer "sticky sessions" (persistent cookies) [issue#438]

Minor changes

#466 tests for CSC apps

#467 Added 'kwargs' parameter for Saved Search History function

#475 README updates

Version 1.7.0

New features and APIs

#468 SDK Support for splunkd search API changes

Bug fixes

#464 updated checks for wildcards in StoragePasswords [issue#458]

Minor changes

#463 Preserve thirdparty cookies

Version 1.6.20

New features and APIs

#442 Optional retries feature added

#447 Create job support for "output_mode:json" [issue#285]

Bug fixes

#449 Set cookie [issue#438]

#460 Remove restart from client.Entity.disable

Minor changes

#444 Update tox.ini

#446 Release workflow refactor

#448 Documentation changes

#450 Removed examples and it's references from the SDK

Commits

e323dd8 Merge pull request #483 from splunk/release/1.7.2

9f1b937 Update client.py

ea198c0 removed comments and updated changelog

137a0ef update version checks compatible with cloud versions

6a24337 release v1.7.2 changes

0db743d Merge pull request #482 from splunk/revert-v2-changes

8af61cb version checks updated in test cases

20e4670 updated version checks for v2 Search APIs

8ca63f2 Revert "reverting v2 search API changes"

1cd9918 reverting v2 search API changes

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump mako from 1.2.0 to 1.2.2
⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps mako from 1.2.0 to 1.2.2.

Release notes

Sourced from mako's releases.

1.2.2

Released: Mon Aug 29 2022

bug

[bug] [lexer] Fixed issue in lexer where the regexp used to match tags would not correctly interpret quoted sections individually. While this parsing issue still produced the same expected tag structure later on, the mis-handling of quoted sections was also subject to a regexp crash if a tag had a large number of quotes within its quoted sections.

References: #366

1.2.1

Released: Thu Jun 30 2022

bug

[bug] [tests] Various fixes to the test suite in the area of exception message rendering to accommodate for variability in Python versions as well as Pygments.

References: #360

misc

[performance] Optimized some codepaths within the lexer/Python code generation process, improving performance for generation of templates prior to their being cached. Pull request courtesy Takuto Ikuta.

References: #361

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump splunk-sdk from 1.6.19 to 1.7.1
Bumps splunk-sdk from 1.6.19 to 1.7.1.

Release notes

Sourced from splunk-sdk's releases.

Release/1.7.1

Version 1.7.1

Bug fixes

#471 Fixed support of Load Balancer "sticky sessions" (persistent cookies) [issue#438]

Minor changes

#466 tests for CSC apps

#467 Added 'kwargs' parameter for Saved Search History function

#475 README updates

Release/1.7.0

Version 1.7.0

New features and APIs

#468 SDK Support for splunkd search API changes

Bug fixes

#464 updated checks for wildcards in StoragePasswords [issue#458]

Minor changes

#463 Preserve thirdparty cookies

Release/1.6.20

Version 1.6.20

New features and APIs

#442 Optional retries feature added

#447 Create job support for "output_mode:json" [issue#285]

Bug fixes

#449 Set cookie [issue#438]

#460 Remove restart from client.Entity.disable

Minor changes

#444 Update tox.ini

#446 Release workflow refactor

#448 Documentation changes

#450 Removed examples and it's references from the SDK

Full Changelog: https://github.com/splunk/splunk-sdk-python/compare/1.6.19...1.6.20

Changelog

Sourced from splunk-sdk's changelog.

Version 1.7.1

Bug fixes

#471 Fixed support of Load Balancer "sticky sessions" (persistent cookies) [issue#438]

Minor changes

#466 tests for CSC apps

#467 Added 'kwargs' parameter for Saved Search History function

#475 README updates

Version 1.7.0

New features and APIs

#468 SDK Support for splunkd search API changes

Bug fixes

#464 updated checks for wildcards in StoragePasswords [issue#458]

Minor changes

#463 Preserve thirdparty cookies

Version 1.6.20

New features and APIs

#442 Optional retries feature added

#447 Create job support for "output_mode:json" [issue#285]

Bug fixes

#449 Set cookie [issue#438]

#460 Remove restart from client.Entity.disable

Minor changes

#444 Update tox.ini

#446 Release workflow refactor

#448 Documentation changes

#450 Removed examples and it's references from the SDK

Commits

db48641 Merge pull request #479 from splunk/release/1.7.1

21dae78 release v1.7.1 changes

f29d31c Merge pull request #475 from splunk/readme_updates

11e6560 README updates

112015c Merge pull request #471 from splunk/cookie_fix

0837de2 Merge pull request #466 from splunk/tests-for-csc-apps

9753de9 Merge pull request #467 from splunk/DVPL-11246

9ed8a10 cookie fix

66a8741 Merge pull request #470 from splunk/master

14ef9f4 Merge pull request #469 from splunk/release/1.7.0

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump pylint from 2.13.7 to 2.15.0
Bumps pylint from 2.13.7 to 2.15.0.

Commits

24eaec2 Bump pylint to 2.15.0, update changelog (#7355)

bb0df4a Update tox.ini (#7358)

1582e37 [literal-comparison] Cleanup of identical/duplicated functional tests

19b4fda [literal-comparison] Make the message explicit with the solution

d200f81 Upgrade astroid version following 2.12.4 release (#7356)

32116ae Add tests for PyCQA#5767

bf8281c Bump TODOs to the next minor version in preparation of release (#7349)

af810ab Revert "[test] Temporary xfail deprecated methods py36 on pypy (#7244)" (#7345)

dcd2b17 Upgrade astroid version following 2.12.3 release (#7344)

c18c9a7 [pre-commit.ci] pre-commit autoupdate

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump ipykernel from 6.13.0 to 6.15.2
Bumps ipykernel from 6.13.0 to 6.15.2.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump splunk-appinspect from 2.18.0 to 2.25.0
Bumps splunk-appinspect from 2.18.0 to 2.25.0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump ipykernel from 6.13.0 to 6.15.1
Bumps ipykernel from 6.13.0 to 6.15.1.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump setuptools from 65.5.0 to 65.5.1
Bumps setuptools from 65.5.0 to 65.5.1.

Changelog

Sourced from setuptools's changelog.

v65.5.1

Misc ^^^^

#3638: Drop a test dependency on the mock package, always use :external+python:py:mod:unittest.mock -- by :user:hroncok

#3659: Fixed REDoS vector in package_index.

Commits

a462cb5 Bump version: 65.5.0 → 65.5.1

de35d8b Merge pull request #3656 from bmorris3/typos

58e23de Update changelog. Ref #3659.

43a9c9b Limit the amount of whitespace to search/backtrack. Fixes #3659.

5791343 Add test capturing failed expectation. Ref #3659.

1f97905 ⚫ Fade to black.

6254567 Remove workaround for emacs.

729b180 ⚫ Fade to black.

c068081 Typo corrections

f777a40 Suppress deprecation warning in --rsyncdir. Workaround for #3655.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
CVE-2007-4559 Patch

Patching CVE-2007-4559

Hi, we are security researchers from the Advanced Research Center at Trellix. We have began a campaign to patch a widespread bug named CVE-2007-4559. CVE-2007-4559 is a 15 year old bug in the Python tarfile package. By using extract() or extractall() on a tarfile object without sanitizing input, a maliciously crafted .tar file could perform a directory path traversal attack. We found at least one unsantized extractall() in your codebase and are providing a patch for you via pull request. The patch essentially checks to see if all tarfile members will be extracted safely and throws an exception otherwise. We encourage you to use this patch or your own solution to secure against CVE-2007-4559. Further technical information about the vulnerability can be found in this blog.

If you have further questions you may contact us through this projects lead researcher Kasimir Schulz.

opened by TrellixVulnTeam 0
Bump certifi from 2022.9.24 to 2022.12.7
Bumps certifi from 2022.9.24 to 2022.12.7.

Commits

9e9e840 2022.12.07

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump splunk-appinspect from 2.27.0 to 2.29.0
Bumps splunk-appinspect from 2.27.0 to 2.29.0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump docker from 6.0.0 to 6.0.1
Bumps docker from 6.0.0 to 6.0.1.

Release notes

Sourced from docker's releases.

6.0.1

🐛 Bugfixes

Fix for The pipe has been ended errors on Windows (#3056)

Support floats for timestamps in Docker logs (since / until) (#3031)

What's Changed

docs: install package in ReadTheDocs build by @milas in docker/docker-py#3032

Use latest stable syntax for Dockerfiles by @thaJeztah in docker/docker-py#3035

feat: add support for floats to docker logs params since / until sinc… by @ArchiMoebius in docker/docker-py#3031

Change prune test to use anonymous volumes by @cpuguy83 in docker/docker-py#3051

socket: handle npipe close by @nicks in docker/docker-py#3056

New Contributors

@ArchiMoebius made their first contribution in docker/docker-py#3031

@nicks made their first contribution in docker/docker-py#3056

Full Changelog: https://github.com/docker/docker-py/compare/6.0.0...6.0.1

Commits

3002298 socket: handle npipe close on Windows (#3056)

bc0a5fb test: use anonymous volume for prune (#3051)

923e067 api: add support for floats to docker logs params since / until (#3031)

1c27ec1 ci: use latest stable syntax for Dockerfiles (#3035)

2494d63 docs: install package in ReadTheDocs build (#3032)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump requests-toolbelt from 0.10.0 to 0.10.1
Bumps requests-toolbelt from 0.10.0 to 0.10.1.

Changelog

Sourced from requests-toolbelt's changelog.

0.10.1 -- 2022-10-25

Fixed Bugs

- Fix urllib3 warning to only emit on X509Adapter usage

Commits

9e5ef79 Release 0.10.1

a96bf59 Merge pull request #336 from pquentin/fix-urllib3-warning

0a3356d Fix tests by removing outdated test_compat.py

6d25425 Fix F822 flake8 error

19b3990 Fix urllib3 warning with conditional import

06f1053 Fix noopenssl and Python 2.7 errors

b93b406 Fix x509 tests by using trustme

8b17435 Merge pull request #334 from pquentin/github-actions-ci

4b88360 Mark failing tests

00e0a2e Run tests using GitHub Actions

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0