darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-05 02:41:14 -05:00
Code Issues Packages Projects Releases Wiki Activity

bump lxml to fix security warning

Browse Source 
two vulnerabilities in <4.6.5 (GHSL-2021-1037 and GHSL-2021-1038)
https://github.com/lxml/lxml/blob/master/CHANGES.txt

also removes docopt as we don't use it except for a dev script (which we
might not need anyway)
This commit is contained in:
Leo Hemsted
2021-12-14 13:47:38 +00:00
parent a9306c4557
commit b7c1fcb66d
2 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
requirements.in
View File

@@ -3,7 +3,6 @@
cffi==1.14.5 cffi==1.14.5
celery[sqs]==5.2.0 celery[sqs]==5.2.0
docopt==0.6.2
Flask-Bcrypt==0.7.1 Flask-Bcrypt==0.7.1
flask-marshmallow==0.14.0 flask-marshmallow==0.14.0
Flask-Migrate==2.7.0 Flask-Migrate==2.7.0
@@ -24,7 +23,7 @@ strict-rfc3339==0.7
rfc3987==1.3.8 rfc3987==1.3.8
cachetools==4.2.1 cachetools==4.2.1
beautifulsoup4==4.9.3 beautifulsoup4==4.9.3
lxml==4.6.3 lxml==4.7.1
Werkzeug==2.0.2 Werkzeug==2.0.2
# higher version causes build to fail on PaaS due to lack of Rust # higher version causes build to fail on PaaS due to lack of Rust

8
requirements.txt
View File

@@ -73,12 +73,10 @@ cryptography==3.3.2
dnspython==1.16.0 dnspython==1.16.0
# via eventlet # via eventlet
docopt==0.6.2 docopt==0.6.2
# via # via notifications-python-client
# -r requirements.in
# notifications-python-client
docutils==0.15.2 docutils==0.15.2
# via awscli # via awscli
eventlet==0.30.2 # pyup: ignore eventlet==0.30.2
# via -r requirements.in # via -r requirements.in
flask==1.1.2 flask==1.1.2
# via # via
@@ -134,7 +132,7 @@ jsonschema==3.2.0
# via -r requirements.in # via -r requirements.in
kombu==5.2.1 kombu==5.2.1
# via celery # via celery
lxml==4.6.3 lxml==4.7.1
# via -r requirements.in # via -r requirements.in
mako==1.1.5 mako==1.1.5
# via alembic # via alembic