From 09c6d0445d23e03b12e8a66c2fb327d71d4e37f1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Apr 2025 01:04:34 +0000 Subject: [PATCH] Bump pip-audit from 2.8.0 to 2.9.0 Bumps [pip-audit](https://github.com/pypa/pip-audit) from 2.8.0 to 2.9.0. - [Release notes](https://github.com/pypa/pip-audit/releases) - [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md) - [Commits](https://github.com/pypa/pip-audit/compare/v2.8.0...v2.9.0) --- updated-dependencies: - dependency-name: pip-audit dependency-version: 2.9.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- poetry.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/poetry.lock b/poetry.lock index 5f81dd810..d239b2ec5 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2045,19 +2045,19 @@ pip = "*" [[package]] name = "pip-audit" -version = "2.8.0" +version = "2.9.0" description = "A tool for scanning Python environments for known vulnerabilities" optional = false python-versions = ">=3.9" groups = ["dev"] files = [ - {file = "pip_audit-2.8.0-py3-none-any.whl", hash = "sha256:200f50d56cb6fba3a9189c20d53250354f72f161d63b6ef77ae5de2b53044566"}, - {file = "pip_audit-2.8.0.tar.gz", hash = "sha256:9816cbd94de6f618a8965c117433006b3d565a708dc05d5a7be47ab65b66fa05"}, + {file = "pip_audit-2.9.0-py3-none-any.whl", hash = "sha256:348b16e60895749a0839875d7cc27ebd692e1584ebe5d5cb145941c8e25a80bd"}, + {file = "pip_audit-2.9.0.tar.gz", hash = "sha256:0b998410b58339d7a231e5aa004326a294e4c7c6295289cdc9d5e1ef07b1f44d"}, ] [package.dependencies] CacheControl = {version = ">=0.13.0", extras = ["filecache"]} -cyclonedx-python-lib = ">=5,<9" +cyclonedx-python-lib = ">=5,<10" packaging = ">=23.0.0" pip-api = ">=0.0.28" pip-requirements-parser = ">=32.0.0"