From ee6ab65c83baca5a168c47637bdbf19657ac8319 Mon Sep 17 00:00:00 2001 From: Andreas Maier Date: Sun, 21 Jul 2024 10:32:24 +0200 Subject: [PATCH] Addressed safety issues up to 2024-07-21 Signed-off-by: Andreas Maier --- .safety-policy-all.yml | 6 ++++++ .safety-policy-install.yml | 2 ++ minimum-constraints.txt | 4 ++-- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.safety-policy-all.yml b/.safety-policy-all.yml index 90bd55aa..6e71ed06 100644 --- a/.safety-policy-all.yml +++ b/.safety-policy-all.yml @@ -32,6 +32,12 @@ security: ignore-vulnerabilities: 51457: reason: Py package is no longer being fixed (latest version 1.11.0) + 68477: + reason: Fixed virtualenv version 20.21.0 requires Python>=3.7 and is used there + 70790: + reason: Fixed tqdm version 4.66.3 requires Python>=3.7 and is used there + 71636: + reason: Fixed authlib version 1.3.1 requires Python>=3.8 and is used there # Continue with exit code 0 when vulnerabilities are found. continue-on-vulnerability-error: False diff --git a/.safety-policy-install.yml b/.safety-policy-install.yml index 781e7722..14a1714f 100644 --- a/.safety-policy-install.yml +++ b/.safety-policy-install.yml @@ -52,6 +52,8 @@ security: reason: Disputed issue in Jinja2 version 3.1.3 - No known fix 71064: reason: Fixed requests version 2.32.2 requires Python>=3.8 and is used there + 71591: + reason: Fixed Jinja2 version 3.1.4 requires Python>=3.7 and is used there # Continue with exit code 0 when vulnerabilities are found. continue-on-vulnerability-error: False diff --git a/minimum-constraints.txt b/minimum-constraints.txt index 4c5e8096..53b653bd 100644 --- a/minimum-constraints.txt +++ b/minimum-constraints.txt @@ -28,7 +28,7 @@ safety-schemas==0.0.2 dparse==0.6.4b0 ruamel.yaml==0.17.21 click==8.0.2 -Authlib==1.2.0 +Authlib==1.3.1 marshmallow==3.15.0 pydantic==1.10.13 typer==0.12.0 @@ -120,7 +120,7 @@ smmap==3.0.1 snowballstemmer==2.0.0 toml==0.10.0 # used by pylint and pytest since some version tomli==1.1.0 -tqdm==4.28.1 +tqdm==4.66.3 typing==3.6.1 webencodings==0.5.1 rich==12.0.0 # used by twine 4.0