Re: Keeping up with security fixes - Mailing list pgadmin-support

From Karl O. Pinc
Subject Re: Keeping up with security fixes
Date
Msg-id 20231023140032.76840cdb@slate.karlpinc.com
Whole thread Raw
In response to Re: Keeping up with security fixes  (Dave Page <dpage@pgadmin.org>)
List pgadmin-support
On Mon, 23 Oct 2023 10:43:05 +0100
Dave Page <dpage@pgadmin.org> wrote:
> On Wed, 18 Oct 2023 at 23:07, Karl O. Pinc <kop@karlpinc.com> wrote:
>
> > What is the expected method for keeping PgAdmin4 up-to-date?
> >  
> 
> It depends on the platform and where you get your packages from.

Thank you very much for your through reply.

I decided to not use the OS-level packages because, at
least for my platform, the package requires apache.  That
overly constrains me.

So I used pypi.org with Python packaging and virtual environments.

I test for updates by comparing the installed package version
with the version available at pypi.  Basically (korn shell):

  [ "$(curl -s https://pypi.org/pypi/pgadmin4/json \
         | jq --raw-output .info.version)" \
     = "$(/srv/venvs/pgadmin4/bin/pip list \
            | awk '{if ($1 == "pgadmin4") print $2;}')" ]

If you see any flaws in this approach I'd appreciate your comments.
(I'm not entirely sure how the pypi API deals with reporting development
versions.  And there might be other problems as well.)

Thanks again for the help.

Regards,

Karl <kop@karlpinc.com>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein



pgadmin-support by date:

Previous
From: Dave Page
Date:
Subject: Re: Keeping up with security fixes
Next
From: Tim Quinn
Date:
Subject: Never asked to set Master Password