From 2da07e51db302d0b5e9b5c67f29df82a0461e25b Mon Sep 17 00:00:00 2001 From: Andreas Maier Date: Fri, 21 Jun 2024 13:21:19 +0200 Subject: [PATCH] Addressed safety issues up to 2024-06-21 Signed-off-by: Andreas Maier --- .safety-policy-install.yml | 2 ++ changes/noissue.5.fix.rst | 1 + minimum-constraints-install.txt | 3 ++- requirements.txt | 3 ++- 4 files changed, 7 insertions(+), 2 deletions(-) create mode 100644 changes/noissue.5.fix.rst diff --git a/.safety-policy-install.yml b/.safety-policy-install.yml index 053657d9..2e2ee569 100644 --- a/.safety-policy-install.yml +++ b/.safety-policy-install.yml @@ -56,6 +56,8 @@ security: reason: Fixed stomp-py version 8.1.1 requires Python>=3.7 and is used there 67895: reason: Fixed idna version 3.7 requires requests>=2.26.0 which requires Python>=3.6 and is used there + 71064: + reason: Fixed requests version 2.32.2 requires Python>=3.8 and is used there # Continue with exit code 0 when vulnerabilities are found. continue-on-vulnerability-error: False diff --git a/changes/noissue.5.fix.rst b/changes/noissue.5.fix.rst new file mode 100644 index 00000000..cef7f8d8 --- /dev/null +++ b/changes/noissue.5.fix.rst @@ -0,0 +1 @@ +Addressed safety issues up to 2024-06-21 diff --git a/minimum-constraints-install.txt b/minimum-constraints-install.txt index 8a26be60..7b122c8c 100644 --- a/minimum-constraints-install.txt +++ b/minimum-constraints-install.txt @@ -35,7 +35,8 @@ pytz==2016.10; python_version <= '3.9' pytz==2019.1; python_version >= '3.10' requests==2.25.0; python_version <= '3.5' requests==2.26.0; python_version == '3.6' -requests==2.31.0; python_version >= '3.7' +requests==2.31.0; python_version == '3.7' +requests==2.32.3; python_version >= '3.8' six==1.14.0; python_version <= '3.9' six==1.16.0; python_version >= '3.10' stomp-py==4.1.23; python_version <= '3.6' diff --git a/requirements.txt b/requirements.txt index f3f1ce47..b65278d4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,7 +18,8 @@ pytz>=2019.1; python_version >= '3.10' # remove ImportWarning in six requests>=2.25.0; python_version <= '3.5' requests>=2.26.0; python_version == '3.6' -requests>=2.31.0; python_version >= '3.7' +requests>=2.31.0; python_version == '3.7' +requests>=2.32.3; python_version >= '3.8' # six 1.16.0 removes the ImportWarning raised by Python 3.10 six>=1.14.0; python_version <= '3.9'