From 32661d4fc338574f205ed030c5fe2132e8776a13 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 11 Nov 2022 18:44:28 +0000 Subject: [PATCH] fix: giza/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BABEL-1278589 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773 --- giza/requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/giza/requirements.txt b/giza/requirements.txt index 51052ec40..65cd7ed16 100644 --- a/giza/requirements.txt +++ b/giza/requirements.txt @@ -1,5 +1,5 @@ argh==0.26.1 -Babel==2.2.0 +Babel==2.9.1 boto==2.39.0 cffi==1.5.2 click==6.2 @@ -12,7 +12,7 @@ giza==0.5.7a0 hieroglyph==0.7.1 idna==2.0 ipaddress==1.0.16 -Jinja2==2.8 +Jinja2==2.11.3 jira==1.0.3 libgiza==0.2.7 MarkupSafe==0.23 @@ -22,7 +22,7 @@ onetimepass==1.0.1 polib==1.0.7 pyasn1==0.1.9 pycparser==2.14 -Pygments==2.1.1 +Pygments==2.7.4 pyOpenSSL==0.15.1 pytz==2015.7 PyYAML==3.11 @@ -31,7 +31,7 @@ requests-oauthlib==0.6.0 requests-toolbelt==0.6.0 rstcloth==0.2.5 six==1.10.0 -Sphinx==1.2.3 +Sphinx==3.0.4 sphinx-intl==0.9.9 sphinxcontrib-httpdomain==1.4.0 tlslite==0.4.9