Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot updates #11060

Open
wants to merge 17 commits into
base: master
Choose a base branch
from
Open

Dependabot updates #11060

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
b9eb9d6
chore(deps): bump eth-account from 0.2.2 to 0.5.9 in /requirements
dependabot[bot] Nov 1, 2022
5022a4e
Merge pull request #1 from Abuchtela/dependabot/pip/requirements/eth-…
Abuchtela Dec 19, 2022
578c1a0
Merge branch 'gitcoinco:master' into master
Abuchtela Jan 23, 2023
dc94524
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Sep 24, 2023
effd2c4
Merge pull request #45 from Abuchtela/snyk-fix-c70eae1ff8fc68a58f0a1e…
Abuchtela Sep 24, 2023
4043475
fix: ops/lambdas/welcomebot/requirements.txt to reduce vulnerabilities
snyk-bot Dec 3, 2023
30a486a
Merge pull request #66 from Abuchtela/snyk-fix-2d77baafe32b67072f7e15…
Abuchtela Dec 19, 2023
d26351b
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Jun 25, 2024
9139959
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Jul 19, 2024
843ad47
fix: package.json & yarn.lock to reduce vulnerabilities
snyk-bot Jul 27, 2024
023b3a8
fix: package.json & yarn.lock to reduce vulnerabilities
snyk-bot Jul 31, 2024
856d714
Merge pull request #121 from Abuchtela/snyk-fix-28b202c8a56bb618cf4cb…
Abuchtela Aug 2, 2024
cdedcc9
Merge pull request #119 from Abuchtela/snyk-fix-81774f48f0cc21511b4ff…
Abuchtela Aug 2, 2024
ebeaf9e
Merge pull request #120 from Abuchtela/snyk-fix-024e08d4106385815c989…
Abuchtela Aug 4, 2024
a210cc9
Merge pull request #111 from Abuchtela/snyk-fix-17fb8a98ca8ecafd9ad75…
Abuchtela Aug 4, 2024
098a0da
fix: requirements/test.txt to reduce vulnerabilities
snyk-bot Aug 8, 2024
3f5239d
Merge pull request #123 from Abuchtela/snyk-fix-9836f54c4402c658d1697…
Abuchtela Aug 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions ops/lambdas/welcomebot/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,6 @@ zappa
flask
slackeventsapi
slackclient
aiohttp>=3.9.0 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=2.3.8 # not directly required, pinned by Snyk to avoid a vulnerability
wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability
2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@
"@joeattardi/emoji-button": "^3.1.1",
"@popperjs/core": "^2.10.2",
"@truffle/hdwallet-provider": "^2.0.0",
"bootstrap": "4.6.0",
"bootstrap": "5.0.0",
"bootstrap-vue": "2.18.0",
"daterangepicker": "3.0.5",
"dompurify": "^2.2.9",
Expand Down
10 changes: 5 additions & 5 deletions requirements/base.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,15 +10,15 @@ django-cors-headers==2.4.0
django-filter==2.0.0
django-haystack
django-ratelimit==1.1.0
djangorestframework==3.11.2
djangorestframework==3.15.2
gitterpy
gunicorn
matplotlib
Markdown==3.2.1
reportlab==3.5.55
reportlab==3.6.13
requests
requests_oauthlib
Pillow==8.3.2
Pillow==9.0.0
premailer
populus
psycopg2-binary==2.8
Expand Down Expand Up @@ -59,7 +59,7 @@ Werkzeug[watchdog]==0.15.5
imageio
boto3==1.18.22
django-storages==1.11.1
eth-account==0.2.2
eth-account==0.5.9
django-classy-tags==0.8.0
django-cookie-law==2.0.1
django-impersonate==1.3
Expand All @@ -84,7 +84,7 @@ redis-semaphore
watchtower==1.0.6
Wand==0.4.4
raven==6.9.0
sentry-sdk==1.1.0
sentry-sdk==2.8.0
websocket-client
bleach
python-magic
Expand Down
1 change: 1 addition & 0 deletions requirements/test.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,4 @@ didkit==0.2.1
datar==0.8.6
pdtypes==0.0.4
importlib-metadata==4.13.0
django>=4.2.15 # not directly required, pinned by Snyk to avoid a vulnerability
7 changes: 6 additions & 1 deletion yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2259,7 +2259,12 @@ [email protected]:
portal-vue "^2.1.7"
vue-functional-data-merge "^3.1.0"

[email protected], "bootstrap@>=4.5.3 <5.0.0":
[email protected]:
version "5.0.0"
resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-5.0.0.tgz#97635ac0e0d6cb466700ebf0fd266bfabf352ed2"
integrity sha512-tmhPET9B9qCl8dCofvHeiIhi49iBt0EehmIsziZib65k1erBW1rHhj2s/2JsuQh5Pq+xz2E9bEbzp9B7xHG+VA==

"bootstrap@>=4.5.3 <5.0.0":
version "4.6.0"
resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-4.6.0.tgz#97b9f29ac98f98dfa43bf7468262d84392552fd7"
integrity sha512-Io55IuQY3kydzHtbGvQya3H+KorS/M9rSNyfCGCg9WZ4pyT/lCxIlpJgG1GXW/PswzC84Tr2fBYi+7+jFVQQBw==
Expand Down