fix(workers): remove schema_version from test files (#4977)

michaelkedar · web-flow · commit 3c28bd6ff72d · 2026-03-06T15:13:59.000+11:00
To prevent updating the schema version from requiring us to regenerate the test files (blocking #4940), changed the worker tests to manually remove the schema_version from the compared vulnerability files.
diff --git a/gcp/workers/oss_fuzz_worker/testdata/UpdateTest_update_bad_ecosystem_new.txt b/gcp/workers/oss_fuzz_worker/testdata/UpdateTest_update_bad_ecosystem_new.txt
@@ -3,5 +3,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/oss_fuzz_worker/testdata/UpdateTest_update_partly_bad_ecosystem_delete.txt b/gcp/workers/oss_fuzz_worker/testdata/UpdateTest_update_partly_bad_ecosystem_delete.txt
@@ -3,5 +3,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '2021-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/RESTUpdateTest_update_no_introduced.txt b/gcp/workers/worker/testdata/RESTUpdateTest_update_no_introduced.txt
@@ -217,5 +217,4 @@
     'id': 'CURL-CVE-2022-32221',
     'modified': '3000-01-01T00:00:00Z',
     'published': '2022-10-26T08:00:00Z',
-    'schema_version': '1.7.3',
     'summary': 'POST following PUT confusion'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_last_affected_git.txt b/gcp/workers/worker/testdata/UpdateTest_last_affected_git.txt
@@ -8,5 +8,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_normalized_pypi.txt b/gcp/workers/worker/testdata/UpdateTest_normalized_pypi.txt
@@ -13,5 +13,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability in an unnormalized package'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_normalized_pypi_pubsub_calls.txt b/gcp/workers/worker/testdata/UpdateTest_normalized_pypi_pubsub_calls.txt
@@ -1 +1 @@
-[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-456", "summary": "A vulnerability in an unnormalized package", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "scrapy", "ecosystem": "PyPI", "purl": "pkg:pypi/scrapy"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": []}], "schema_version": "1.7.3"}')]
+[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-456", "summary": "A vulnerability in an unnormalized package", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "scrapy", "ecosystem": "PyPI", "purl": "pkg:pypi/scrapy"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": []}], "schema_version": "SCHEMA_VERSION"}')]
diff --git a/gcp/workers/worker/testdata/UpdateTest_pypi_pubsub_calls.txt b/gcp/workers/worker/testdata/UpdateTest_pypi_pubsub_calls.txt
@@ -1 +1 @@
-[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-123", "summary": "A vulnerability", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "grpcio", "ecosystem": "PyPI", "purl": "pkg:pypi/grpcio"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": ["1.14.2", "1.15.0", "1.15.0rc1", "1.16.0", "1.16.0rc1", "1.16.1", "1.17.0", "1.17.1", "1.18.0", "1.19.0", "1.20.0", "1.20.0rc1", "1.20.0rc2", "1.20.0rc3", "1.20.1", "1.21.0rc1", "1.21.1", "1.21.1rc1", "1.22.0", "1.22.0rc1", "1.22.1", "1.23.0", "1.23.0rc1", "1.23.1", "1.24.0", "1.24.0rc1", "1.24.1", "1.24.3", "1.25.0", "1.25.0rc1", "1.26.0", "1.26.0rc1", "1.27.0rc1", "1.27.0rc2", "1.27.1", "1.27.2", "1.28.0rc1", "1.28.0rc2", "1.28.1", "1.29.0", "1.30.0"]}], "schema_version": "1.7.3"}')]
+[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-123", "summary": "A vulnerability", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "grpcio", "ecosystem": "PyPI", "purl": "pkg:pypi/grpcio"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": ["1.14.2", "1.15.0", "1.15.0rc1", "1.16.0", "1.16.0rc1", "1.16.1", "1.17.0", "1.17.1", "1.18.0", "1.19.0", "1.20.0", "1.20.0rc1", "1.20.0rc2", "1.20.0rc3", "1.20.1", "1.21.0rc1", "1.21.1", "1.21.1rc1", "1.22.0", "1.22.0rc1", "1.22.1", "1.23.0", "1.23.0rc1", "1.23.1", "1.24.0", "1.24.0rc1", "1.24.1", "1.24.3", "1.25.0", "1.25.0rc1", "1.26.0", "1.26.0rc1", "1.27.0rc1", "1.27.0rc2", "1.27.1", "1.27.2", "1.28.0rc1", "1.28.0rc2", "1.28.1", "1.29.0", "1.30.0"]}], "schema_version": "SCHEMA_VERSION"}')]
diff --git a/gcp/workers/worker/testdata/UpdateTest_ubuntu_severity_type.txt b/gcp/workers/worker/testdata/UpdateTest_ubuntu_severity_type.txt
@@ -216,6 +216,5 @@
                           'url': 'https://git.kernel.org/stable/c/aace6b63892ce8307e502a60fe2f5a4bc6e1cfe7'},
                       {   'type': 'REPORT',
                           'url': 'https://git.kernel.org/stable/c/c92d6089d8ad7d4d815ebcedee3f3907b539ff1f'}],
-    'schema_version': '1.7.3',
     'severity': [{'score': 'medium', 'type': 'Ubuntu'}],
     'upstream': ['CVE-2025-38094']}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update.txt b/gcp/workers/worker/testdata/UpdateTest_update.txt
@@ -17,7 +17,6 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '2021-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'severity': [   {   'score': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L',
                         'type': 'CVSS_V3'}],
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_alpine.txt b/gcp/workers/worker/testdata/UpdateTest_update_alpine.txt
@@ -506,5 +506,4 @@
                       {   'type': 'ARTICLE',
                           'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html'},
                       {   'type': 'WEB',
-                          'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html'}],
-    'schema_version': '1.7.3'}
+                          'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html'}]}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_bad_ecosystem_new.txt b/gcp/workers/worker/testdata/UpdateTest_update_bad_ecosystem_new.txt
@@ -3,5 +3,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_bucket_0.txt b/gcp/workers/worker/testdata/UpdateTest_update_bucket_0.txt
@@ -33,5 +33,4 @@
                       {   'type': 'FIX',
                           'url': 'https://github.com/opencontainers/selinux/commit/03b517dc4fd57245b1cf506e8ba7b817b6d309da'},
                       {   'type': 'WEB',
-                          'url': 'https://github.com/opencontainers/runc/issues/2128'}],
-    'schema_version': '1.7.3'}
+                          'url': 'https://github.com/opencontainers/runc/issues/2128'}]}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_bucket_2.txt b/gcp/workers/worker/testdata/UpdateTest_update_bucket_2.txt
@@ -14,7 +14,6 @@
                           'url': 'https://android.googlesource.com/platform/frameworks/av/+/084077feb6b8c961adcbe77b2bd76601ca54e534'},
                       {   'type': 'FIX',
                           'url': 'https://android.googlesource.com/platform/frameworks/av/+/cc2165840d524bb9553f9d73d1904633d20100a2'}],
-    'schema_version': '1.7.3',
     'summary': 'In multiple methods of AAudioService, there is a possible '
                'use-after-free due to a race condition. This could lead to '
                'local escalation of privilege with User execution privileges '
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_bucket_cve.txt b/gcp/workers/worker/testdata/UpdateTest_update_bucket_cve.txt
@@ -105,6 +105,5 @@
                           'url': 'https://vuldb.com/?ctiid.217549'},
                       {   'type': 'REPORT',
                           'url': 'https://vuldb.com/?id.217549'}],
-    'schema_version': '1.7.3',
     'severity': [   {   'score': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H',
                         'type': 'CVSS_V3'}]}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_debian.txt b/gcp/workers/worker/testdata/UpdateTest_update_debian.txt
@@ -42,5 +42,4 @@
     'published': '2014-09-20T00:00:00Z',
     'references': [   {   'type': 'ADVISORY',
                           'url': 'https://www.debian.org/security/2014/dsa-3029'}],
-    'schema_version': '1.7.3',
     'summary': 'nginx - security update'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_last_affected.txt b/gcp/workers/worker/testdata/UpdateTest_update_last_affected.txt
@@ -51,5 +51,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_limit.txt b/gcp/workers/worker/testdata/UpdateTest_update_limit.txt
@@ -22,5 +22,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_linux.txt b/gcp/workers/worker/testdata/UpdateTest_update_linux.txt
@@ -8,5 +8,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_maven.txt b/gcp/workers/worker/testdata/UpdateTest_update_maven.txt
@@ -38,7 +38,6 @@
                           'url': 'https://github.com/apache/any23'},
                       {   'type': 'WEB',
                           'url': 'https://lists.apache.org/thread.html/r589d1a9f94dbeee7a0f5dbe8513a0e300dfe669bd964ba2fbfe28e07%40%3Cannounce.apache.org%3E'}],
-    'schema_version': '1.7.3',
     'severity': [   {   'score': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N',
                         'type': 'CVSS_V3'}],
     'summary': 'XML Injection in Any23'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_new.txt b/gcp/workers/worker/testdata/UpdateTest_update_new.txt
@@ -15,5 +15,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_no_introduced.txt b/gcp/workers/worker/testdata/UpdateTest_update_no_introduced.txt
@@ -15,5 +15,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '2021-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_partly_bad_ecosystem_delete.txt b/gcp/workers/worker/testdata/UpdateTest_update_partly_bad_ecosystem_delete.txt
@@ -3,5 +3,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '2021-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_partly_bad_ecosystem_new.txt b/gcp/workers/worker/testdata/UpdateTest_update_partly_bad_ecosystem_new.txt
@@ -14,5 +14,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/testdata/UpdateTest_update_pypi.txt b/gcp/workers/worker/testdata/UpdateTest_update_pypi.txt
@@ -54,5 +54,4 @@
     'modified': '3000-01-01T00:00:00Z',
     'published': '3000-01-01T00:00:00Z',
     'references': [{'type': 'WEB', 'url': 'https://ref.com/ref'}],
-    'schema_version': '1.7.3',
     'summary': 'A vulnerability'}
diff --git a/gcp/workers/worker/worker_test.py b/gcp/workers/worker/worker_test.py

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		-[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-456", "summary": "A vulnerability in an unnormalized package", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "scrapy", "ecosystem": "PyPI", "purl": "pkg:pypi/scrapy"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": []}], "schema_version": "1.7.3"}')]
	`1`	+[call('projects/test-osv/topics/pypi-bridge', data=b'{"id": "PYSEC-456", "summary": "A vulnerability in an unnormalized package", "details": "Blah blah blah\\nBlah\\n", "modified": "3000-01-01T00:00:00Z", "published": "3000-01-01T00:00:00Z", "references": [{"type": "WEB", "url": "https://ref.com/ref"}], "affected": [{"package": {"name": "scrapy", "ecosystem": "PyPI", "purl": "pkg:pypi/scrapy"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "1.14.2"}, {"fixed": "1.31.0"}]}, {"type": "GIT", "repo": "https://osv-test/repo/url", "events": [{"introduced": "eefe8ec3f1f90d0e684890e810f3f21e8500a4cd"}, {"fixed": "8d8242f545e9cec3e6d0d2e3f5bde8be1c659735"}]}], "versions": []}], "schema_version": "SCHEMA_VERSION"}')]