Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audit Snyk check/fix 1.21 #2382

Merged
merged 2 commits into from
Jun 21, 2024
Merged

Audit Snyk check/fix 1.21 #2382

merged 2 commits into from
Jun 21, 2024

Conversation

geo-ghci-int[bot]
Copy link
Contributor

@geo-ghci-int geo-ghci-int bot commented Jun 21, 2024

⠋ Running snyk test for /tmp/tmpis8gfwjm/tilecloud-chain
► Running snyk test for /tmp/tmpis8gfwjm/tilecloud-chain

  • Looking for supported Python items

✔ Looking for supported Python items

  • Looking for supported Python items

✔ Looking for supported Python items
⠋ Processing 1 pyproject.toml items⠋ Processing 2 requirements.txt items✔ Processed 2 requirements.txt items

  • Checking poetry version
    ⚠️ Could not detect poetry version, proceeding anyway. Some operations may fail.
  • Fixing pyproject.toml 1/1
    ✔ Processed 1 pyproject.toml items
    ✔ Done

Successful fixes:

pyproject.toml
✔ Pinned azure-identity from 1.13.0 to 1.16.1
✔ Pinned cryptography from 41.0.1 to 42.0.8
✔ Pinned gunicorn from 20.1.0 to 22.0.0
✔ Pinned idna from 3.4 to 3.7
✔ Upgraded jinja2 from 3.1.2 to 3.1.4
✔ Pinned msal from 1.22.0 to 1.24.1
✔ Pinned pillow from 10.0.0 to 10.3.0
✔ Pinned requests from 2.31.0 to 2.32.2
✔ Pinned urllib3 from 1.26.16 to 1.26.19

Summary:
1 items were successfully fixed
1 items were not vulnerable

32 issues: 1 Critical | 8 High | 17 Medium | 6 Low
30 issues are fixable
30 issues were successfully fixed

@geo-ghci-int geo-ghci-int bot enabled auto-merge (squash) June 21, 2024 14:55
@geo-ghci-int geo-ghci-int bot merged commit af4bd41 into 1.21 Jun 21, 2024
8 checks passed
@geo-ghci-int geo-ghci-int bot deleted the ghci/audit/snyk/1.21 branch June 21, 2024 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant