From f343135a9388c3e8f277bc50e9d370a0c59118fe Mon Sep 17 00:00:00 2001 From: "geo-ghci-int[bot]" <146321879+geo-ghci-int[bot]@users.noreply.github.com> Date: Tue, 9 Jul 2024 22:50:17 +0000 Subject: [PATCH] Audit Snyk check/fix 1.1 (#1820) Co-authored-by: geo-ghci-int[bot] <146321879+geo-ghci-int[bot]@users.noreply.github.com> --- Pipfile | 2 +- Pipfile.lock | 8 ++++---- example-project/ci/requirements.txt | 1 + 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/Pipfile b/Pipfile index d8e8a63f9..2d6c48d14 100644 --- a/Pipfile +++ b/Pipfile @@ -80,7 +80,7 @@ urllib3 = "==1.26.19" virtualenv = "==20.13.4" virtualenv-clone = "==0.5.7" webencodings = "==0.5.1" -zipp = "==3.7.0" +zipp = "==3.19.1" [dev-packages] prospector = {version = "==1.6.0", extras = ["with_bandit", "with_mypy"]} diff --git a/Pipfile.lock b/Pipfile.lock index 5fefd4410..2d52732b1 100644 --- a/Pipfile.lock +++ b/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "b9dce3a94cb5dba5f49f2b5e0af15b465c19805cdb3c063064c9641df837f114" + "sha256": "d29597e7575eb84541c59df86cf810a552e29915b5ec63ec4982a78f4c98a6fd" }, "pipfile-spec": 6, "requires": { @@ -887,11 +887,11 @@ }, "zipp": { "hashes": [ - "sha256:9f50f446828eb9d45b267433fd3e9da8d801f614129124863f9c51ebceafb87d", - "sha256:b47250dd24f92b7dd6a0a8fc5244da14608f3ca90a5efcd37a3b1642fac9a375" + "sha256:2828e64edb5386ea6a52e7ba7cdb17bb30a73a858f5eb6eb93d8d36f5ea26091", + "sha256:35427f6d5594f4acf82d25541438348c26736fa9b3afa2754bcd63cdb99d8e8f" ], "index": "pypi", - "version": "==3.7.0" + "version": "==3.19.1" } }, "develop": { diff --git a/example-project/ci/requirements.txt b/example-project/ci/requirements.txt index 90c589a62..2c7b9e0d4 100644 --- a/example-project/ci/requirements.txt +++ b/example-project/ci/requirements.txt @@ -5,3 +5,4 @@ setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerabil tqdm>=4.66.3 # not directly required, pinned by Snyk to avoid a vulnerability urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability