From 3f820bfe957dc3ea4d6b70d133e6400d22f4b105 Mon Sep 17 00:00:00 2001 From: "geo-ghci-int[bot]" <146321879+geo-ghci-int[bot]@users.noreply.github.com> Date: Sun, 7 Jul 2024 20:53:53 +0000 Subject: [PATCH] Audit Snyk check/fix 1.21 --- ci/requirements.txt | 2 +- poetry.lock | 8 ++++---- pyproject.toml | 2 +- requirements.txt | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/ci/requirements.txt b/ci/requirements.txt index 6a08a91cf..86ee43cea 100644 --- a/ci/requirements.txt +++ b/ci/requirements.txt @@ -5,6 +5,6 @@ poetry-plugin-tweak-dependencies-version==1.5.2 pre-commit==3.6.2 poetry-plugin-drop-python-upper-constraint==0.1.0 importlib-metadata<8.0.0 -certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability +certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability diff --git a/poetry.lock b/poetry.lock index 09d1cdb76..876eb733f 100644 --- a/poetry.lock +++ b/poetry.lock @@ -283,13 +283,13 @@ files = [ [[package]] name = "certifi" -version = "2024.2.2" +version = "2024.7.4" description = "Python package for providing Mozilla's CA Bundle." optional = false python-versions = ">=3.6" files = [ - {file = "certifi-2024.2.2-py3-none-any.whl", hash = "sha256:dc383c07b76109f368f6106eee2b593b04a011ea4d55f652c6ca24a754d1cdd1"}, - {file = "certifi-2024.2.2.tar.gz", hash = "sha256:0569859f95fc761b18b45ef421b1290a0f65f147e92a1e5eb3e635f9a5e4e66f"}, + {file = "certifi-2024.7.4-py3-none-any.whl", hash = "sha256:c198e21b1289c2ab85ee4e67bb4b4ef3ead0892059901a8d5b622f24a1101e90"}, + {file = "certifi-2024.7.4.tar.gz", hash = "sha256:5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b"}, ] [[package]] @@ -3295,4 +3295,4 @@ test = ["zope.testing"] [metadata] lock-version = "2.0" python-versions = ">=3.10,<3.12" -content-hash = "00f2dea6b990d9db427410b434e851310784756c4c864036e5971129b79cc632" +content-hash = "78f73de5190307b859f92fefd874afdc5074b0dc7f5f32331358ceca8c210597" diff --git a/pyproject.toml b/pyproject.toml index 5096ea7fe..841a9a899 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -67,7 +67,7 @@ pyramid = "2.0.2" jsonschema-validator-new = "0.1.0" azure-storage-blob = "12.19.1" waitress = "3.0.0" -certifi = "2024.2.2" +certifi = "2024.7.4" azure-identity = { version = "1.16.1", optional = true } cryptography = { version = "42.0.8", optional = true } gunicorn = { version = "22.0.0", optional = true } diff --git a/requirements.txt b/requirements.txt index e448d7743..4ca58044c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,6 +4,6 @@ poetry-dynamic-versioning==1.2.0 poetry-plugin-tweak-dependencies-version==1.5.2 pip==24.0 poetry-plugin-drop-python-upper-constraint==0.1.0 -certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability +certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability