Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 #1339

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
+1 −0
Open

[Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 #1339

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading status checks…
fix: test-requirements.txt to reduce vulnerabilities 
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
@snyk-bot
snyk-bot committed Jul 10, 2024

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode
commit ee58da2f107428b9b3b07f7046f646e7d799b4c4
1 change: 1 addition & 0 deletions test-requirements.txt
View file
Original file line number Diff line number Diff line change
@@ -4,3 +4,4 @@ pytest-xdist
coverage
# Pin urllib3 to the version which does not depend on appengine
urllib3<1.27,>=1.21.1
zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability