From 7b8c86e0a23c074e89eefebb0dd78813929c1d42 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 11 Jul 2024 07:48:34 +0000 Subject: [PATCH] fix: template/{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- .../{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/template/{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt b/template/{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt index 4a3f3f67..14536dc7 100644 --- a/template/{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt +++ b/template/{% if docs == 'mkdocs' %}docs{% endif %}/requirements.txt @@ -3,3 +3,5 @@ mkdocs-material mkdocstrings[python] mkdocs-git-revision-date-localized-plugin mkdocs-macros-plugin +requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability