From 5216512ebc0174b547f280ef75b6361244e9d4ec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 09:23:40 +0000 Subject: [PATCH] fix: cla-backend/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-7430173 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- cla-backend/requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/cla-backend/requirements.txt b/cla-backend/requirements.txt index 4cebb2536..af6f37d0c 100644 --- a/cla-backend/requirements.txt +++ b/cla-backend/requirements.txt @@ -6,7 +6,7 @@ attrs==19.3.0 beautifulsoup4==4.8.1 boto3==1.22.1 botocore==1.25.11 -certifi==2023.7.22 +certifi==2024.7.4 chardet==3.0.4 colorama==0.4.3 coverage==4.5.4 @@ -44,7 +44,7 @@ pytest-clarity==0.3.0a0 pytest-cov==2.8.1 python-dateutil==2.8.1 python-jose==3.0.1 -requests==2.31.0 +requests==2.32.2 requests-oauthlib==1.2.0 rsa==4.7 s3transfer==0.5.0 @@ -53,11 +53,11 @@ six==1.13.0 soupsieve==1.9.5 termcolor==1.1.0 typed-ast==1.4.1 -urllib3==1.26.18 +urllib3==1.26.19 vintage==0.4.1 wcwidth==0.1.7 Werkzeug==0.15.5 wrapt==1.11.2 -zipp==3.15.0 +zipp==3.19.1 markupsafe==2.0.1 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability