awsebcli 3.27.1__tar.gz → 3.27.2__tar.gz

{awsebcli-3.27.1 → awsebcli-3.27.2}/CHANGES.rst

@@ -1,5 +1,10 @@
 Changelog
 =========
+--------------------
+3.27.2 (2026-05-13)
+--------------------
+- Restrict pickle class loading for ``.localstate`` deserialization in ``eb local`` commands
+
 --------------------
 3.27.1 (2026-03-25)
 --------------------

{awsebcli-3.27.1/awsebcli.egg-info → awsebcli-3.27.2}/PKG-INFO

@@ -1,12 +1,11 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.2
 Name: awsebcli
-Version: 3.27.1
+Version: 3.27.2
 Summary: Command Line Interface for AWS EB.
 Home-page: http://aws.amazon.com/elasticbeanstalk/
 Author: AWS Elastic Beanstalk
 Author-email: aws-eb-cli@amazon.com
 License: Apache License 2.0
-Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
@@ -20,6 +19,34 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 License-File: LICENSE.txt
+Requires-Dist: botocore<2,>=1.35.0
+Requires-Dist: cement==2.10.14
+Requires-Dist: colorama<0.5,>=0.4.6
+Requires-Dist: pathspec==0.12.1
+Requires-Dist: python-dateutil<3.0.0,>=2.1
+Requires-Dist: requests<3,>=2.31
+Requires-Dist: setuptools>=20.0
+Requires-Dist: semantic_version<2.11,>=2.10.0
+Requires-Dist: termcolor<3,>=2.4.0
+Requires-Dist: wcwidth<0.3,>=0.2.13
+Requires-Dist: PyYAML<6.1,>=5.3.1
+Requires-Dist: urllib3<2,>=1.26.5; python_version < "3.10"
+Requires-Dist: urllib3<3,>=1.26.5; python_version >= "3.10"
+Requires-Dist: packaging<27.0,>=24.2
+Requires-Dist: blessed>=1.20.0
+Requires-Dist: fabric==3.2.2
+Requires-Dist: pythonnet<4,>=3.0.5; platform_system == "Windows"
+Requires-Dist: pypiwin32==219; sys_platform == "win32" and python_version < "3.6"
+Requires-Dist: pypiwin32==223; sys_platform == "win32" and python_version >= "3.6"
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: home-page
+Dynamic: license
+Dynamic: provides-extra
+Dynamic: requires-dist
+Dynamic: summary
 
 ======
 EB CLI
@@ -99,6 +126,11 @@ in the *AWS Elastic Beanstalk Developer Guide*.
 
 Changelog
 =========
+--------------------
+3.27.2 (2026-05-13)
+--------------------
+- Restrict pickle class loading for ``.localstate`` deserialization in ``eb local`` commands
+
 --------------------
 3.27.1 (2026-03-25)
 --------------------
@@ -977,5 +1009,3 @@ Changelog
 - Default database username changed from admin to ebroot
 - Trim application version description if it is too long
 - Application version no longer includes git hash
-
-

{awsebcli-3.27.1 → awsebcli-3.27.2/awsebcli.egg-info}/PKG-INFO

@@ -1,12 +1,11 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.2
 Name: awsebcli
-Version: 3.27.1
+Version: 3.27.2
 Summary: Command Line Interface for AWS EB.
 Home-page: http://aws.amazon.com/elasticbeanstalk/
 Author: AWS Elastic Beanstalk
 Author-email: aws-eb-cli@amazon.com
 License: Apache License 2.0
-Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
@@ -20,6 +19,34 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 License-File: LICENSE.txt
+Requires-Dist: botocore<2,>=1.35.0
+Requires-Dist: cement==2.10.14
+Requires-Dist: colorama<0.5,>=0.4.6
+Requires-Dist: pathspec==0.12.1
+Requires-Dist: python-dateutil<3.0.0,>=2.1
+Requires-Dist: requests<3,>=2.31
+Requires-Dist: setuptools>=20.0
+Requires-Dist: semantic_version<2.11,>=2.10.0
+Requires-Dist: termcolor<3,>=2.4.0
+Requires-Dist: wcwidth<0.3,>=0.2.13
+Requires-Dist: PyYAML<6.1,>=5.3.1
+Requires-Dist: urllib3<2,>=1.26.5; python_version < "3.10"
+Requires-Dist: urllib3<3,>=1.26.5; python_version >= "3.10"
+Requires-Dist: packaging<27.0,>=24.2
+Requires-Dist: blessed>=1.20.0
+Requires-Dist: fabric==3.2.2
+Requires-Dist: pythonnet<4,>=3.0.5; platform_system == "Windows"
+Requires-Dist: pypiwin32==219; sys_platform == "win32" and python_version < "3.6"
+Requires-Dist: pypiwin32==223; sys_platform == "win32" and python_version >= "3.6"
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: home-page
+Dynamic: license
+Dynamic: provides-extra
+Dynamic: requires-dist
+Dynamic: summary
 
 ======
 EB CLI
@@ -99,6 +126,11 @@ in the *AWS Elastic Beanstalk Developer Guide*.
 
 Changelog
 =========
+--------------------
+3.27.2 (2026-05-13)
+--------------------
+- Restrict pickle class loading for ``.localstate`` deserialization in ``eb local`` commands
+
 --------------------
 3.27.1 (2026-03-25)
 --------------------
@@ -977,5 +1009,3 @@ Changelog
 - Default database username changed from admin to ebroot
 - Trim application version description if it is too long
 - Application version no longer includes git hash
-
-

{awsebcli-3.27.1 → awsebcli-3.27.2}/awsebcli.egg-info/SOURCES.txt

@@ -203,4 +203,6 @@ ebcli/operations/tagops/tagops.py
 ebcli/resources/__init__.py
 ebcli/resources/regex.py
 ebcli/resources/statics.py
-ebcli/resources/strings.py
+ebcli/resources/strings.py
+tests/test_dependencies_mismatch.py
+tests/test_help_texts.py

{awsebcli-3.27.1 → awsebcli-3.27.2}/awsebcli.egg-info/entry_points.txt

@@ -1,4 +1,3 @@
 [console_scripts]
 eb = ebcli.core.ebcore:main
 ebp = ebcli.core.ebpcore:main
-

{awsebcli-3.27.1 → awsebcli-3.27.2}/ebcli/__init__.py

@@ -11,4 +11,4 @@
 # distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
 # ANY KIND, either express or implied. See the License for the specific
 # language governing permissions and limitations under the License.
-__version__ = '3.27.1'
+__version__ = '3.27.2'

{awsebcli-3.27.1 → awsebcli-3.27.2}/ebcli/operations/localops.py

@@ -10,7 +10,8 @@
 # distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
 # ANY KIND, either express or implied. See the License for the specific
 # language governing permissions and limitations under the License.
-from botocore.compat import six
+import io as _io
+import pickle
 
 from ebcli.containers.envvarcollector import EnvvarCollector
 from ebcli.containers.pathconfig import PathConfig
@@ -18,7 +19,21 @@ from ebcli.core import fileoperations, io
 from ebcli.lib import utils
 from ebcli.operations import commonops, envvarops
 from ebcli.resources.strings import strings
-cPickle = six.moves.cPickle
+
+
+class _SafeUnpickler(pickle.Unpickler):
+    """Only allow deserializing LocalState and EnvvarCollector."""
+    _ALLOWED = {
+        ('ebcli.operations.localops', 'LocalState'),
+        ('ebcli.containers.envvarcollector', 'EnvvarCollector'),
+        ('__builtin__', 'set'),
+        ('builtins', 'set'),
+    }
+
+    def find_class(self, module, name):
+        if (module, name) in self._ALLOWED:
+            return super().find_class(module, name)
+        raise pickle.UnpicklingError(f"Forbidden: {module}.{name}")
 
 
 class LocalState(object):
@@ -30,15 +45,15 @@ class LocalState(object):
         self.envvarcollector = envvarcollector
 
     def dumps(self, path):
-        fileoperations.write_to_data_file(data=cPickle.dumps(self, protocol=2),
+        fileoperations.write_to_data_file(data=pickle.dumps(self, protocol=2),
                                           location=path)
 
     @classmethod
     def loads(cls, path):
         try:
             data = fileoperations.read_from_data_file(path)
-            return cPickle.loads(data)
-        except IOError:
+            return _SafeUnpickler(_io.BytesIO(data)).load()
+        except (IOError, pickle.UnpicklingError):
             return cls(EnvvarCollector())
 
     @classmethod

awsebcli-3.27.2/tests/test_dependencies_mismatch.py

@@ -0,0 +1,145 @@
+# Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+# http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+
+try:
+    from pip._internal.operations.check import (
+        check_package_set,
+        create_package_set_from_installed,
+    )
+except ImportError:
+    raise RuntimeError('You need pip==21.1 to check for dependency incompatibilities.')
+
+from ebcli.core import io
+
+_indent = '  '
+
+
+def color_red(message):
+    io.echo(io.bold(io.color('red', message)))
+
+
+def color_green(message):
+    io.echo(io.bold(io.color('green', message)))
+
+
+def collect_package_requirements_by_requirement_name(req_name, package_set):
+    required_by = dict()
+    for pkg_name, package in package_set.items():
+        for req in package.dependencies:
+            if req.name.lower() == req_name.lower():
+                required_by[pkg_name] = req.specifier
+
+    return required_by
+
+
+def collect_package_set():
+    package_set = create_package_set_from_installed()[0]
+
+    return package_set
+
+
+def check_for_missing_requirements_and_dependency_incompatibilities():
+    try:
+        package_set = collect_package_set()
+        missing, conflicting = check_package_set(package_set)
+
+        io.echo('- Checking for missing requirements ... ')
+        if missing:
+            color_red('{}Found unmet dependencies'.format(_indent * 1))
+            missing_description = describe_missing_results(missing, package_set)
+            color_red(missing_description)
+        else:
+            color_green('{}OK!'.format(_indent * 2))
+
+        io.echo('- Checking for dependency incompatibilities ... ')
+        if conflicting:
+            color_red('{}Found dependency incompatibilities'.format(_indent * 1))
+            conflicting_description = describe_conflicting_results(conflicting, package_set)
+            color_red(conflicting_description)
+        else:
+            color_green('{}OK!'.format(_indent * 1))
+
+        if missing or conflicting:
+            exit(1)
+    except Exception as e:
+        raise RuntimeError(
+            '    Something went wrong while attempting to find missing and/or incompatible dependencies. '
+            'The following exception was raised: \n    {}'.format(str(e))
+        )
+
+
+def describe_conflicting_results(conflicting, package_set):
+    conflicting_reqs = dict()
+    description = '{}Confliciting dependencies:\n'.format(_indent * 2)
+
+    for pkg_name in conflicting:
+        for result in conflicting[pkg_name]:
+
+            req_name = result[0]
+            req_version = result[1]
+            req = result[2]
+
+            if not req_name in conflicting_reqs:
+                conflicting_reqs[req_name] = {
+                    'required_by': collect_package_requirements_by_requirement_name(req_name, package_set),
+                    'package_details': package_set[req_name]
+                }
+
+    for req_name, req in conflicting_reqs.items():
+        req_version = req['package_details'].version
+        description += '{}{}:\n'.format(_indent * 3, req_name)
+        description += '{}Installed version: {}\n'.format(_indent * 4, req_version)
+        description += '{}Required by:\n'.format(_indent * 4)
+        for pkg_name, specifier in req['required_by'].items():
+            is_conflict = not specifier.contains(req_version, prereleases=True)
+            description += '{}{} {} ({}: {}) {}\n'.format(
+                _indent * 5,
+                pkg_name,
+                package_set[pkg_name].version,
+                req_name,
+                specifier,
+                '[CONFLICT]' if is_conflict else ''
+            )
+
+    return description
+
+
+def describe_missing_results(missing, package_set):
+    missing_reqs = dict()
+    description = '{}Missing dependencies:\n'.format(_indent * 2)
+
+    for pkg_name in missing:
+        for result in missing[pkg_name]:
+
+            req_name = result[0]
+
+            if not req_name in missing_reqs:
+                missing_reqs[req_name] = collect_package_requirements_by_requirement_name(req_name, package_set)
+
+    for req_name, required_by in missing_reqs.items():
+        description += '{}{}:\n'.format(_indent * 3, req_name)
+        description += '{}Required by:\n'.format(_indent * 4)
+        for pkg_name, specifier in required_by.items():
+            description += '{}{} {} ({}: {})\n'.format(
+                _indent * 5,
+                pkg_name,
+                package_set[pkg_name].version,
+                req_name,
+                specifier,
+            )
+
+    return description
+
+io.echo('Checking for dependency mismatches ...')
+check_for_missing_requirements_and_dependency_incompatibilities()