Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 25 vulnerabilities #111

Open
wants to merge 11 commits into
base: develop
Choose a base branch
from
Open

[Snyk] Fix for 25 vulnerabilities #111

Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
da4f2ea
Merge pull request #104 from qld-gov-au/develop
duttonw Mar 8, 2023
6204853
Merge pull request #106 from qld-gov-au/develop
ThrawnCA May 24, 2023
b44110b
Merge pull request #110 from qld-gov-au/develop
ThrawnCA Dec 14, 2023
d171b77
fix: dev-requirements.txt to reduce vulnerabilities
snyk-bot Jan 4, 2024
55d1e1d
update Moto to handle newer MarkupSafe
ThrawnCA Feb 16, 2024
8fc23f4
limit test Werkzeug to what CKAN can handle
ThrawnCA Feb 16, 2024
b8270a0
update flask-login to handle newer Werkzeug
ThrawnCA Feb 16, 2024
264ff82
update Jinja2 to handle newer Markupsafe
ThrawnCA Feb 16, 2024
3dd2f64
update Flask to handle newer Jinja
ThrawnCA Feb 16, 2024
5e4c76d
make test mock dependency explicit instead of relying on container
ThrawnCA Feb 16, 2024
bfc1c3c
limit test Flask version to handle current Jinja
ThrawnCA Feb 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 11 additions & 2 deletions dev-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,18 @@
moto==2.0.1
mock
moto==5.0.1
ckanapi==4.3
flask>2,<2.1
flask-login==0.6.3

#1.0.2 is python3 only
httpretty==0.9.7
jinja2>=3
parameterized==0.8.1
pytest-cov
pytest-ckan
six>=1.13.0
six>=1.13.0
certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
cryptography>=41.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=2.2.3,<3 # not directly required, pinned by Snyk to avoid a vulnerability
Loading