mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-09-06 06:38:24 -04:00
Force lxml to latest version
Lower versions have a security vulnerability, see https://github.com/lxml/lxml/security/advisories/GHSA-55x5-fj6c-h6m8 The `pyexcel-*` packages which require `lxml` don’t pin a version. `pip-compile` will respect what’s in `requirements.txt` as long as the dependencies are fulfilled[1] so we don’t need to add it to `requirements.in` --- 1. https://github.com/jazzband/pip-tools#updating-requirements
This commit is contained in:
@@ -111,7 +111,7 @@ lml==0.1.0
|
|||||||
# via
|
# via
|
||||||
# pyexcel
|
# pyexcel
|
||||||
# pyexcel-io
|
# pyexcel-io
|
||||||
lxml==4.6.3
|
lxml==4.6.5
|
||||||
# via
|
# via
|
||||||
# pyexcel-ezodf
|
# pyexcel-ezodf
|
||||||
# pyexcel-ods3
|
# pyexcel-ods3
|
||||||
|
|||||||
Reference in New Issue
Block a user