From f40cffb9251dffe41d28639e95acaae13fae9523 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Sep 2024 23:35:37 +0000 Subject: [PATCH] fix: lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886958 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886959 --- .../manager/pip_requirements/__fixtures__/requirements5.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt b/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt index de53ecbede9cd0..1a0c784ab40ff8 100644 --- a/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt +++ b/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt @@ -2,7 +2,7 @@ --index-url https://artifactory.company.com/artifactory/api/pypi/python/simple --trusted-host artifactory.company.com --default-timeout 600 --extra-index-url http://example.com/private-pypi/ # Packages -Django[argon2]==2.0.12 +Django==4.2.16 celery [redis]==4.1.1 foo [bar] == 3.2.1 # handles extra white space some-package==0.3.1