From 5c7c52991b64fbb123327702ecc230618d5d9b52 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Sep 2021 04:30:16 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BABEL-1278589 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 --- requirements-dev.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 613378e31..48a13b90e 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -7,7 +7,7 @@ alabaster==0.7.12 # via sphinx astroid==2.4.1 # via pylint attrs==19.3.0 # via pytest -babel==2.8.0 # via sphinx +babel==2.9.1 # via sphinx bleach==3.1.5 # via readme-renderer certifi==2020.4.5.1 # via requests cffi==1.14.0 # via cryptography @@ -22,7 +22,7 @@ idna==2.9 # via requests imagesize==1.2.0 # via sphinx isort==4.3.21 # via pylint jeepney==0.4.3 # via keyring, secretstorage -jinja2==2.11.2 # via sphinx +jinja2==2.11.3 # via sphinx keyring==21.2.1 # via twine lazy-object-proxy==1.4.3 # via astroid lxml==4.5.1 # via codechat @@ -36,7 +36,7 @@ pkginfo==1.5.0.1 # via twine pluggy==0.13.1 # via pytest py==1.8.1 # via pytest pycparser==2.20 # via cffi -pygments==2.6.1 # via codechat, readme-renderer, sphinx +pygments==2.7.4 # via codechat, readme-renderer, sphinx pylint==2.5.2 # via -r requirements-dev.in pyparsing==2.4.7 # via packaging pytest==5.4.2 # via -r requirements-dev.in @@ -61,7 +61,7 @@ sqlalchemy==1.3.17 # via -r requirements.in toml==0.10.1 # via pylint tqdm==4.46.0 # via twine twine==3.1.1 # via -r requirements-dev.in -urllib3==1.25.9 # via requests, selenium +urllib3==1.26.5 # via requests, selenium wcwidth==0.1.9 # via pytest webencodings==0.5.1 # via bleach wheel==0.34.2 # via -r requirements-dev.in