From 1eb2a6d42e9c62a6be731f0c868bfe60e4e1785c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Jun 2024 20:33:14 +0000 Subject: [PATCH] fix: dev-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-7161587 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829 --- dev-requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dev-requirements.txt b/dev-requirements.txt index f51401750d..6c6e88ab32 100644 --- a/dev-requirements.txt +++ b/dev-requirements.txt @@ -1,11 +1,11 @@ coverage==6.4 -tornado==6.2 +tornado==6.4.1 PySocks==1.7.1 pytest==7.0.0 pytest-timeout==2.1.0 pytest-freezegun==0.4.2 flaky==3.7.0 trustme==0.9.0 -cryptography==37.0.2 +cryptography==42.0.8 backports.zoneinfo==0.2.1;python_version<"3.9" towncrier==21.9.0