From d07329003b80f676aec6ca26ff4074d9cdd9b911 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 8 Jun 2023 17:01:08 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-2428349 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538573 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538575 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-539932 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-543054 --- requirements.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 7c82d69..65ad3fe 100644 --- a/requirements.txt +++ b/requirements.txt @@ -32,7 +32,7 @@ pytz==2014.10 repoze.lru==0.6 requests==2.20 schematics==1.1.1 -setuptools==7.0 +setuptools==65.5.1 sh==1.11 simplejson==3.6.5 six==1.9.0 @@ -40,10 +40,11 @@ sphinxcontrib-httpdomain==1.4.0 translationstring==1.3 tzlocal==1.1.2 venusian==1.0 -waitress==1.0a1 +waitress==2.1.1 zope.deprecation==4.1.1 zope.interface==4.1.1 git+https://github.com/openprocurement/barbecue.git git+https://github.com/openprocurement/python-json-patch.git git+https://github.com/openprocurement/rfc6266.git -e git+https://github.com/openprocurement/openprocurement.api.git@master#egg=openprocurement.api +certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability