From 77d9af2de7f500315b8968016411566da42953e8 Mon Sep 17 00:00:00 2001
From: Bertrand Zuchuat <bertrand.zuchuat@rero.ch>
Date: Mon, 4 Dec 2023 08:08:19 +0100
Subject: [PATCH] dependencies: fix security issues

* Adds safety exceptions.
* Fixes the stats tests.

Co-Authored-by: Bertrand Zuchuat <bertrand.zuchuat@rero.ch>
---
 scripts/test                                  |  8 +++++++-
 tests/ui/stats/test_stats_report_n_patrons.py | 20 ++++++++++++-------
 2 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/scripts/test b/scripts/test
index d042d7a35a..51fbd3d0e0 100755
--- a/scripts/test
+++ b/scripts/test
@@ -88,8 +88,14 @@ function pretests () {
 # | py                         | 1.11.0    | <=1.11.0                 | 51457    |
 # | safety                     | 1.10.3    | <2.2.0                   | 51358    |
 # | sentry-sdk                 | 1.6.0     | <1.14.0                  | 53812    |
+# | flask-caching              | 2.1.0     | <=2.1.0                  | 40459    |
+# | pillow                     | 9.5.0     | <10.0.0                  | 62156    |
+# | werkzeug                   | 1.0.1     | <2.3.8                   | 62019    |
+# | cryptography               | 39.0.2    | <41.0.4                  | 62451    |
+# | cryptography               | 39.0.2    | <41.0.5                  | 62452    |
+# | cryptography               | 39.0.2    | >=3.1,<41.0.6            | 62556    |
 # +==============================================================================+
-  safety check -i 45183 -i 44501 -i 51668 -i 42194 -i 42852 -i 53325 -i 53326 -i 54456 -i 42498 -i 43738 -i 47833 -i 51457 -i 51358 -i 59473 -i 55261 -i 53812 -i 59956 -i 59062 -i 59473 -i 60224 -i 60225 -i 60223 -i 61489
+  safety check -i 40459 -i 45183 -i 44501 -i 51668 -i 42194 -i 42852 -i 53325 -i 53326 -i 54456 -i 42498 -i 43738 -i 47833 -i 51457 -i 51358 -i 59473 -i 55261 -i 53812 -i 59956 -i 59062 -i 59473 -i 60224 -i 60225 -i 60223 -i 61489 -i 62019 -i 62156 -i 62451 -i 62452 -i 62556
   info_msg "Check json:"
   invenio reroils utils check_json tests/data rero_ils/modules data
   info_msg "Check license:"
diff --git a/tests/ui/stats/test_stats_report_n_patrons.py b/tests/ui/stats/test_stats_report_n_patrons.py
index 8877dbb25b..96a574d379 100644
--- a/tests/ui/stats/test_stats_report_n_patrons.py
+++ b/tests/ui/stats/test_stats_report_n_patrons.py
@@ -28,7 +28,7 @@
 
 
 def test_stats_report_number_of_patrons(
-        org_martigny, lib_martigny, org_sion, lib_martigny_bourg,
+        db, org_martigny, lib_martigny, org_sion, lib_martigny_bourg,
         patron_type_children_martigny, patron_type_adults_martigny,
         patron_type_grown_sion, loc_public_martigny,
         loc_public_martigny_bourg,
@@ -36,6 +36,11 @@ def test_stats_report_number_of_patrons(
         patron2_martigny_data, patron_sion_data, roles
 ):
     """Test the number of patrons and active patrons."""
+    def patch_creation_date(patron, date):
+        patron.model.created = date
+        db.session.merge(patron.model)
+        patron.reindex()
+
     # no data
     cfg = {
         "library": {
@@ -53,20 +58,21 @@ def test_stats_report_number_of_patrons(
     from rero_ils.modules.patrons.api import create_patron_from_data
 
     patron_martigny = create_patron_from_data(
-        data=patron_martigny_data,
-        delete_pid=True,
+        data={k: v for k, v in patron_martigny_data.items() if k != 'pid'},
         dbcommit=True,
         reindex=True)
     patron2_martigny = create_patron_from_data(
-        data=patron2_martigny_data,
-        delete_pid=True,
+        data={k: v for k, v in patron2_martigny_data.items() if k != 'pid'},
         dbcommit=True,
         reindex=True)
     patron_sion = create_patron_from_data(
-        data=patron_sion_data,
-        delete_pid=True,
+        data={k: v for k, v in patron_sion_data.items() if k != 'pid'},
         dbcommit=True,
         reindex=True)
+    date = datetime(year=2023, month=11, day=1)
+    patch_creation_date(patron_martigny, date)
+    patch_creation_date(patron2_martigny, date)
+    patch_creation_date(patron_sion, date)
     es.indices.refresh(index='patrons')
 
     # no distributions