Updated dependencies and add py-lock make command

This changeset updates dependencies that have been flagged as out-of date and/or vulnerable.  It also adds a py-lock Makefile command for keeping the poetry.lock file in sync without introducing additional issues from transitive dependency updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2023-10-30 15:40:22 -04:00
parent 8779160f89
commit f949786e2d
3 changed files with 18 additions and 22 deletions

View File

@@ -18,7 +18,7 @@ black = "==23.9.1"
bcrypt = "==3.2.2"
beautifulsoup4 = "==4.12.2"
billiard = "==3.6.4.0"
bleach = "==4.1.0"
bleach = "^6.1.0"
blinker = "~=1.4"
boto3 = "==1.28.15"
botocore = "==1.31.15"
@@ -61,7 +61,7 @@ pyjwt = "==2.8.0"
python-dotenv = "==1.0.0"
radon = "==6.0.1"
sqlalchemy = "==1.4.40"
werkzeug = "~=2.3"
werkzeug = "^3.0.1"
vulture = "==2.10"
packaging = "==23.1"
notifications-utils = {git = "https://github.com/GSA/notifications-utils.git", develop = true, branch = "main"}