Skip to content

Commit

Permalink
fix: requirements-dev.txt to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-5862881
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-5862882
  • Loading branch information
snyk-bot committed Aug 29, 2023
1 parent 1992561 commit d0cd930
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion requirements-dev.txt
Original file line number Diff line number Diff line change
Expand Up @@ -31,4 +31,5 @@ wheel >= 0.37
xmltodict >= 0.12

# test requirements for extra packages
zarr >= 2.13.3
zarr >= 2.13.3
jupyter-server>=2.7.2 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit d0cd930

Please sign in to comment.