update stac, weaver, magpie, twitcher, cowbird - security fixes for EOL Python and http-related libraires

Author: fmigneault

CHANGES.md

@@ -15,7 +15,22 @@
 [Unreleased](https://github.com/bird-house/birdhouse-deploy/tree/master) (latest)
 ------------------------------------------------------------------------------------------------------------------
 
-[//]: # (list changes here, using '-' for each new entry, remove this when items are added)
+- STAC API: Security update to version [2.2.0](https://github.com/crim-ca/stac-app/releases/tag/2.2.0)
+  (relates to [crim-ca/stac-app#65](https://github.com/crim-ca/stac-app/pull/65)).
+
+- Weaver: Security update to version [6.8.0](https://github.com/crim-ca/weaver/releases/tag/6.8.0)
+  (relates to [crim-ca/weaver#868](https://github.com/crim-ca/weaver/pull/868)).
+
+- Cowbird: Security update to version [4.3.0](https://github.com/Ouranosinc/cowbird/releases/tag/2.6.0)
+  (relates to [Ouranosinc/cowbird#98](https://github.com/Ouranosinc/cowbird/pull/98)).
+
+- Magpie: Security update to version [4.3.0](https://github.com/Ouranosinc/Magpie/releases/tag/4.3.0)
+  (relates to [Ouranosinc/Magpie#640](https://github.com/Ouranosinc/Magpie/pull/640)).
+
+- Twitcher: Security update to version [0.11.0](https://github.com/bird-house/twitcher/releases/tag/v0.11.0)
+  (relates to [bird-house/twitcher#143](https://github.com/bird-house/twitcher/pull/143),
+  [bird-house/twitcher#145](https://github.com/bird-house/twitcher/pull/145) and
+  [bird-house/twitcher#146](https://github.com/bird-house/twitcher/pull/146)).
 
 [2.20.1](https://github.com/bird-house/birdhouse-deploy/tree/2.20.1) (2025-12-16)
 ------------------------------------------------------------------------------------------------------------------

birdhouse/components/cowbird/default.env

@@ -29,7 +29,7 @@ VARS="$VARS $EXTRA_VARS"
 # Cowbird Configuration
 # =====================
 
-export COWBIRD_VERSION="2.5.2"
+export COWBIRD_VERSION="2.6.0"
 export COWBIRD_DOCKER=pavics/cowbird
 export COWBIRD_IMAGE='${COWBIRD_DOCKER}:${COWBIRD_VERSION}'
 export COWBIRD_IMAGE_API='${COWBIRD_IMAGE}-webservice'

birdhouse/components/magpie/default.env

@@ -5,7 +5,7 @@
 # are applied and must be added to the list of DELAYED_EVAL.
 
 # Tag version that will be used to update Magpie API, Magpie CLI, and matching Twitcher with Magpie Adapter
-export MAGPIE_VERSION=4.2.0
+export MAGPIE_VERSION=4.3.0
 export MAGPIE_IMAGE='pavics/magpie:${MAGPIE_VERSION}'
 export MAGPIE_IMAGE_URI='registry.hub.docker.com/${MAGPIE_IMAGE}'
 

birdhouse/components/stac/default.env

@@ -17,8 +17,8 @@ export STAC_PGPASSWORD='${BIRDHOUSE_POSTGRES_PASSWORD}'
 #   crim-ca/stac-app:1.0.0 uses STAC-fastapi version 3.0.3 with pgstac 0.6.10 (techically >=0.7,<0.8, but 0.6 works)
 #   crim-ca/stac-app:1.1.0 uses STAC-fastapi version 5.2.0 with pgstac 0.9.6 (techically >=0.8,<0.10)
 #   crim-ca/stac-app:2.0.1 uses STAC-fastapi version 6.0.0 with pgstac 0.9.6+ (techically >=0.8,<0.10)
-export STAC_VERSION=6.0.0-crim-2.1.0
-export STAC_IMAGE='ghcr.io/crim-ca/stac-app:2.1.0'
+export STAC_VERSION=6.0.0-crim-2.2.0
+export STAC_IMAGE='ghcr.io/crim-ca/stac-app:2.2.0'
 export STAC_IMAGE_URI='${STAC_IMAGE}'
 # database SQL schemas must be aligned with STAC_VERSION
 # there versions are not "equal", check compatibilities on https://github.com/stac-utils/stac-fastapi-pgstac

birdhouse/components/twitcher/default.env

@@ -5,7 +5,7 @@
 #   This is because Twitcher must be built with the MagpieAdapter component.
 #   (https://github.com/Ouranosinc/Magpie/blob/master/Dockerfile.adapter)
 #   The following reference is only indicative for the 'service-config.json'.
-export TWITCHER_VERSION=0.10.0
+export TWITCHER_VERSION=0.11.0
 export TWITCHER_RELEASE='${TWITCHER_VERSION}-magpie-${MAGPIE_VERSION}'
 export TWITCHER_DOCKER=pavics/twitcher
 export TWITCHER_IMAGE='${TWITCHER_DOCKER}:magpie-${MAGPIE_VERSION}'

birdhouse/components/weaver/default.env

@@ -55,7 +55,7 @@ OPTIONAL_VARS="
 export WEAVER_CONFIG=HYBRID
 
 # default release version that will be used to fetch docker images (API mananger & celery workers services)
-export WEAVER_VERSION=6.6.2
+export WEAVER_VERSION=6.8.0
 export WEAVER_DOCKER=pavics/weaver
 export WEAVER_IMAGE='${WEAVER_DOCKER}:${WEAVER_VERSION}'
 export WEAVER_MANAGER_IMAGE='${WEAVER_IMAGE}-manager'