Chore(nginx-rock): Update the rock base, websockets version pin.

.trivyignore

@@ -0,0 +1,2 @@
+# pebble
+CVE-2024-34156

nginx_rock/rockcraft.yaml

@@ -1,16 +1,12 @@
 # Copyright 2024 Canonical Ltd.
 # See LICENSE file for licensing details.
-package-repositories:
-  - type: apt
-    ppa: deadsnakes/ppa
-    priority: always
 
 name: indico-nginx
 summary: Indico nginx rock
 description: Nginx OCI image for the Indico charm
 version: "1.0"
-base: ubuntu@22.04
-build-base: ubuntu@22.04
+base: ubuntu@24.04
+build-base: ubuntu@24.04
 license: Apache-2.0
 platforms:
   amd64:
@@ -27,11 +23,16 @@ parts:
     organize:
       nginx.conf: etc/nginx/nginx.conf
       common_headers.conf: etc/nginx/common_headers.conf
+  nginx-prometheus-exporter:
+    plugin: go
+    build-snaps:
+      - go
+    source: https://github.com/nginxinc/nginx-prometheus-exporter
+    source-tag: v1.3.0
+    source-type: git
   nginx:
     stage-packages:
       - nginx
-    stage-snaps:
-      - gtrkiller-nginx-prometheus-exporter/latest/edge
     plugin: nil
     override-build: |
       craftctl default
@@ -40,8 +41,6 @@ parts:
       craftctl default
       mkdir run
   indico-files:
-    build-environment:
-      - PARTS_PYTHON_INTERPRETER: python3.12
     python-packages:
       - indico==3.3.1
     build-packages:

tox.ini

@@ -102,6 +102,7 @@ deps =
     requests
     types-PyYAML
     types-requests
+    websockets<14.0 # https://github.com/juju/python-libjuju/issues/1184
     -r{toxinidir}/requirements.txt
 commands =
     codespell {[vars]plugins_path} --skip {toxinidir}/.git --skip {toxinidir}/.tox \
@@ -154,6 +155,7 @@ deps =
     pytest
     pytest-asyncio
     pytest-operator
+    websockets<14.0 # https://github.com/juju/python-libjuju/issues/1184
     -r{toxinidir}/requirements.txt
 commands =
     pytest -v --tb native --ignore={[vars]tst_path}unit --log-cli-level=INFO -s {posargs}