chore: bump setuptools from 68.2.2 to 70.0.0 (#134)

epam · Jul 16, 2024 · fc875a6 · fc875a6
1 parent 2879331
commit fc875a6
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 6 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -20,6 +20,8 @@ RUN apk update && apk upgrade --no-cache libcrypto3 libssl3
 
 # fix CVE-2023-52425
 RUN apk upgrade --no-cache libexpat
+# fix CVE-2024-6345
+RUN pip install "setuptools==70.0.0"
 
 WORKDIR /app
 

diff --git a/README.md b/README.md
@@ -42,9 +42,11 @@ make serve
 
 As of now, Windows distributions do not include the make tool. To run make commands, the tool can be installed using
 the following command (since [Windows 10](https://learn.microsoft.com/en-us/windows/package-manager/winget/)):
+
 ```sh
 winget install GnuWin32.Make
 ```
+
 For convenience, the tool folder can be added to the PATH environment variable as `C:\Program Files (x86)\GnuWin32\bin`.
 The command definitions inside Makefile should be cross-platform to keep the development environment setup simple.
 

diff --git a/poetry.lock b/poetry.lock