darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-19 14:09:20 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update Python dependencies - 7/12/24 - and ignore idna pip-audit flag

Browse Source 
This changeset updates several Python dependencies that Dependabot has flagged.

It also ignores a pip-audit report of idna, which incorrectly flagged the version we are on as having been affected by PYSEC-2024-60; this was fixed in version 3.7 of idna, which we are currently using.  We will update the action again once the audit flag is corrected and/or another fix version is released (if needed).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2024-07-12 12:02:37 -04:00
parent 3a2ba3a8c0
commit 94e8df0470
3 changed files with 122 additions and 120 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pyproject.toml
View File

@@ -19,7 +19,7 @@ flask-talisman = "*"
flask-wtf = "^1.2"
govuk-bank-holidays = "^0.14"
gunicorn = {version = "==22.0.0", extras = ["eventlet"]}
humanize = "~=4.9"
humanize = "~=4.10"
itsdangerous = "~=2.2"
jinja2 = "~=3.1"
newrelic = "*"
@@ -39,8 +39,8 @@ wtforms = "~=3.1"
markdown = "^3.5.2"
async-timeout = "^4.0.3"
bleach = "^6.1.0"
boto3 = "^1.34.139"
botocore = "^1.34.139"
boto3 = "^1.34.143"
botocore = "^1.34.143"
cachetools = "^5.3.3"
cffi = "^1.16.0"
cryptography = "^42.0.8"