Skip to content

Commit

Permalink
Sync security updates to main. (#897)
Browse files Browse the repository at this point in the history
* RDISCROWD-6713 Lib upgrades to fix Critical and High severity alerts (#890)

* Bump requests from 2.26.0 to 2.31.0

Bumps [requests](https://github.com/psf/requests) from 2.26.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.26.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump cryptography from 3.4.8 to 41.0.2

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.8 to 41.0.2.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.8...41.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump certifi from 2021.5.30 to 2023.7.22

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2023.7.22.
- [Commits](certifi/python-certifi@2021.05.30...2023.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated libs to address all Critical and High severity alerts.

* up

* up

* up

* Updated libs.

* fix

* up

* up

* up

* up

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* RDISCROWD-6713 Pillow 10.1.0 (#895)

* Bump requests from 2.26.0 to 2.31.0

Bumps [requests](https://github.com/psf/requests) from 2.26.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.26.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump cryptography from 3.4.8 to 41.0.2

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.8 to 41.0.2.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.8...41.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump certifi from 2021.5.30 to 2023.7.22

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2023.7.22.
- [Commits](certifi/python-certifi@2021.05.30...2023.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated libs to address all Critical and High severity alerts.

* up

* up

* up

* Updated libs.

* fix

* up

* up

* up

* up

* Pillow 10.1.0

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* pyOpenSSL==22.1.0

* Updated libs.

* Minimum updates per depend bot.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
kbecker42 and dependabot[bot] authored Jan 2, 2025
1 parent dac3580 commit 5aa738f
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
"botocore==1.31.62",
"cachelib==0.3.0",
"cachetools==4.2.2",
"certifi==2021.5.30",
"certifi==2023.7.22",
"cffi==1.14.6",
"chardet==4.0.0",
"charset-normalizer==2.0.6",
Expand All @@ -21,7 +21,7 @@
"cov-core==1.15.0",
"coverage==5.5",
"croniter==1.0.15",
"cryptography==3.4.8",
"cryptography==41.0.2",
"cssselect==1.1.0",
"debtcollector==2.3.0",
"decorator==5.1.0",
Expand Down Expand Up @@ -116,7 +116,7 @@
"pykerberos==1.2.1",
"PyLD==1.0.4", # "PyLD==2.0.3", 1.0.4 version resolves pyld.jsonld.JsonLdError
"pyldap==3.0.0.post1",
"pyOpenSSL==21.0.0",
"pyOpenSSL==23.2.0",
"pyparsing==2.4.7",
"python-dateutil==2.8.2",
"python-editor==1.0.4",
Expand All @@ -133,7 +133,7 @@
"readability-lxml==0.8.1",
"redis==3.5.3",
"rednose==1.3.0",
"requests==2.26.0",
"requests==2.31.0",
"requests-kerberos==0.12.0",
"requests-oauthlib==1.1.0",
"rfc3986==1.5.0",
Expand Down

0 comments on commit 5aa738f

Please sign in to comment.