From d5e961499b606b229f134e98c9213b858f63f332 Mon Sep 17 00:00:00 2001 From: "geo-ghci-int[bot]" <146321879+geo-ghci-int[bot]@users.noreply.github.com> Date: Mon, 8 Jul 2024 02:20:21 +0000 Subject: [PATCH] Audit Snyk check/fix master --- ci/requirements.txt | 1 + poetry.lock | 8 ++++---- pyproject.toml | 1 + requirements.txt | 1 + 4 files changed, 7 insertions(+), 4 deletions(-) diff --git a/ci/requirements.txt b/ci/requirements.txt index 667ec30..4679642 100644 --- a/ci/requirements.txt +++ b/ci/requirements.txt @@ -6,3 +6,4 @@ poetry-plugin-tweak-dependencies-version==1.5.2 poetry-dynamic-versioning==1.4.0 importlib-metadata<8.0.0 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability diff --git a/poetry.lock b/poetry.lock index 64b9970..da39381 100644 --- a/poetry.lock +++ b/poetry.lock @@ -95,13 +95,13 @@ virtualenv = ["virtualenv (>=20.0.35)"] [[package]] name = "certifi" -version = "2024.6.2" +version = "2024.7.4" description = "Python package for providing Mozilla's CA Bundle." optional = false python-versions = ">=3.6" files = [ - {file = "certifi-2024.6.2-py3-none-any.whl", hash = "sha256:ddc6c8ce995e6987e7faf5e3f1b02b302836a0e5d98ece18392cb1a36c72ad56"}, - {file = "certifi-2024.6.2.tar.gz", hash = "sha256:3cd43f1c6fa7dedc5899d69d3ad0398fd018ad1a17fba83ddaf78aa46c747516"}, + {file = "certifi-2024.7.4-py3-none-any.whl", hash = "sha256:c198e21b1289c2ab85ee4e67bb4b4ef3ead0892059901a8d5b622f24a1101e90"}, + {file = "certifi-2024.7.4.tar.gz", hash = "sha256:5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b"}, ] [[package]] @@ -1450,4 +1450,4 @@ test = ["big-O", "importlib-resources", "jaraco.functools", "jaraco.itertools", [metadata] lock-version = "2.0" python-versions = ">=3.9,<4.0" -content-hash = "1c365f9c1649f09e64991e2b56c35f5e710ec1affbf1d0bf480aa9e64688d915" +content-hash = "5b2b0bde8543dbcfebde516c0d453ba2239b3e40655a21c7cfc7593188d63508" diff --git a/pyproject.toml b/pyproject.toml index 2c76184..4df66cf 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -48,6 +48,7 @@ pygments = "2.18.0" docutils = "0.21.2" idna = "3.7" urllib3 = "2.2.2" +certifi = "2024.7.4" [tool.poetry.group.dev.dependencies] prospector = { version = "1.10.3", extras = ["with_bandit", "with_mypy", "with_pyroma"] } diff --git a/requirements.txt b/requirements.txt index 63efe80..b960c44 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,3 +4,4 @@ poetry-dynamic-versioning==1.4.0 pip==24.1.1 poetry-plugin-export==1.8.0 poetry-plugin-drop-python-upper-constraint==0.1.0 +certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability