Merge pull request #93 from ansible/vulnerability/AAP-44647

AAP-44647 - Fix for CVE-2025-21605

Author: mabulgu

.github/workflows/check_dependencies.yaml

@@ -17,11 +17,9 @@ jobs:
           python-version: '3.11'
       - name: Check Python version
         run: python --version
-      - name: Install pip-tools
-        run: pip install --user pip-tools
-      - name: Check lip-compile version
-        run: pip-compile --version
-      - name: Generate requirements.txt file
-        run: pip-compile -v --generate-hashes pyproject.toml
+      - name: Install PDM
+        run: pip install pdm
+      - name: Export dependencies to requirements.txt
+        run: pdm export --without-hashes --format requirements > requirements.txt
       - name: List requirements.txt file
         run: cat requirements.txt

Containerfile.redis

@@ -4,9 +4,9 @@ FROM quay.io/centos/centos:stream9
 # Install necessary dependencies (gcc, make, etc.) for building Redis from source
 RUN yum install -y gcc make wget tar gzip openssl openssl-devel && \
     yum clean all && mkdir -p /etc/redis && \
-    wget https://download.redis.io/releases/redis-7.2.7.tar.gz && \
-    tar xzf redis-7.2.7.tar.gz -C /etc/redis --strip-components=1 && \
-    rm redis-7.2.7.tar.gz && \
+    wget https://download.redis.io/releases/redis-7.2.8.tar.gz && \
+    tar xzf redis-7.2.8.tar.gz -C /etc/redis --strip-components=1 && \
+    rm redis-7.2.8.tar.gz && \
     chmod 770 /var/run
 
 # Change working directory to the extracted Redis source code directory