Audit Snyk check/fix 2.6 (#11174)

* Audit Snyk check/fix 2.6 * Update dpkg versions list From the artifact of the previous workflow run * Don't update npm packages --------- Co-authored-by: geo-ghci-int[bot] <146321879+geo-ghci-int[bot]@users.noreply.github.com> Co-authored-by: Stéphane Brunner <[email protected]>
camptocamp · Jun 20, 2024 · 1a09e64 · 1a09e64
1 parent 8bd7710
commit 1a09e64
Show file tree

Hide file tree

Showing 6 changed files with 19 additions and 40 deletions.
diff --git a/Pipfile b/Pipfile
@@ -180,7 +180,7 @@ sqlalchemy-utils = "==0.36.8"
 stevedore = "==3.3.3"
 toml = "==0.10.2"
 ujson = "==5.4.0"
-urllib3 = "==1.26.18"
+urllib3 = "==1.26.19"
 venusian = "==3.0.0"
 waitress = "==2.1.2"
 webob = "==1.8.7"

diff --git a/Pipfile.lock b/Pipfile.lock
diff --git a/admin/requirements.txt b/admin/requirements.txt
@@ -19,5 +19,5 @@ babel>=2.9.1 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
-urllib3>=1.26.18 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/doc/Pipfile b/doc/Pipfile
@@ -29,7 +29,7 @@ sphinxcontrib-devhelp = "==1.0.2"
 sphinxcontrib-jsmath = "==1.0.1"
 sphinxcontrib-qthelp = "==1.0.3"
 sphinxcontrib-serializinghtml = "==1.1.5"
-urllib3 = "==1.26.18"
+urllib3 = "==1.26.19"
 
 [requires]
 python_version = "3.8"
diff --git a/doc/Pipfile.lock b/doc/Pipfile.lock
diff --git a/geoportal/requirements.txt b/geoportal/requirements.txt
@@ -35,5 +35,5 @@ numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
-urllib3>=1.26.18 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability