Update requirements

NTIA · Aug 7, 2023 · ce6a543 · ce6a543
1 parent 3c693bf
commit ce6a543
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 7 deletions.
diff --git a/src/requirements-dev.in b/src/requirements-dev.in
@@ -5,3 +5,8 @@ pytest-cov>=3.0, <4.0
 pytest-django>=4.0, <5.0
 ray[default]>=2.5.0
 tox>=4.0,<5.0
+
+# The following are sub-dependencies for which SCOS Sensor enforces a
+# higher minimum patch version than the dependencies which require them.
+# This is done to ensure the inclusion of specific security patches.
+aiohttp>=3.8.5        # CVE-2023-37276
diff --git a/src/requirements-dev.txt b/src/requirements-dev.txt
@@ -4,8 +4,9 @@
 #
 #    pip-compile requirements-dev.in
 #
-aiohttp==3.8.4
+aiohttp==3.8.5
     # via
+    #   -r requirements-dev.in
     #   aiohttp-cors
     #   ray
 aiohttp-cors==0.7.0
@@ -358,11 +359,12 @@ scipy==1.10.1
     # via
     #   -r requirements.txt
     #   scos-actions
-scos_actions @ git+https://github.com/NTIA/scos-actions@tagged-unions-processing-info
+scos-actions @ git+https://github.com/NTIA/scos-actions@tagged-unions-processing-info
     # via
     #   -r requirements.txt
     #   scos-tekrsa
-scos_tekrsa @ git+https://github.com/NTIA/[email protected]
+scos-tekrsa @ git+https://github.com/NTIA/[email protected]
+    # via -r requirements.txt
 sigmf @ git+https://github.com/NTIA/SigMF@multi-recording-archive
     # via
     #   -r requirements.txt

diff --git a/src/requirements.in b/src/requirements.in
@@ -20,5 +20,5 @@ scos_tekrsa @ git+https://github.com/NTIA/[email protected]
 # higher minimum patch version than the dependencies which require them.
 # This is done to ensure the inclusion of specific security patches.
 certifi>=2023.07.22   # CVE-2023-37920
-cryptography>=41.0.2  # CVE-2023-38325
+cryptography>=41.0.3  # GHSA-jm77-qphf-c4w8
 sqlparse>=0.4.4       # CVE-2023-30608
diff --git a/src/requirements.txt b/src/requirements.txt
@@ -14,7 +14,7 @@ attrs==22.2.0
     #   ray
 bcrypt==4.0.1
     # via paramiko
-certifi==2022.7.22
+certifi==2023.7.22
     # via
     #   -r requirements.in
     #   requests
@@ -180,11 +180,11 @@ ruamel-yaml-clib==0.2.7
     # via ruamel-yaml
 scipy==1.10.1
     # via scos-actions
-scos_actions @ git+https://github.com/NTIA/scos-actions@tagged-unions-processing-info
+scos-actions @ git+https://github.com/NTIA/scos-actions@tagged-unions-processing-info
     # via
     #   -r requirements.in
     #   scos-tekrsa
-scos_tekrsa @ git+https://github.com/NTIA/[email protected]
+scos-tekrsa @ git+https://github.com/NTIA/[email protected]
     # via -r requirements.in
 sigmf @ git+https://github.com/NTIA/SigMF@multi-recording-archive
     # via scos-actions