From 72886f9dbef7d4c09e80043847134e916717ceb3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 19 Mar 2024 19:31:23 +0000 Subject: [PATCH] fix: requirements/local.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-IPYTHON-2348630 - https://snyk.io/vuln/SNYK-PYTHON-PROMPTTOOLKIT-6141120 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-5750273 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 --- requirements/local.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/requirements/local.txt b/requirements/local.txt index 9afd9cd..6cda263 100644 --- a/requirements/local.txt +++ b/requirements/local.txt @@ -28,5 +28,7 @@ django-debug-toolbar==3.7.0 # https://github.com/jazzband/django-debug-toolbar django-extensions==3.2.1 # https://github.com/django-extensions/django-extensions django-coverage-plugin==2.0.4 # https://github.com/nedbat/django_coverage_plugin pytest-django==4.5.2 # https://github.com/pytest-dev/pytest-django -pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability +pygments>=2.15.0 # not directly required, pinned by Snyk to avoid a vulnerability setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +ipython>=7.16.3 # not directly required, pinned by Snyk to avoid a vulnerability +prompt-toolkit>=3.0.13 # not directly required, pinned by Snyk to avoid a vulnerability