diff --git a/.safety-policy.yml b/.safety-policy.yml index 98c29af..1eb9416 100644 --- a/.safety-policy.yml +++ b/.safety-policy.yml @@ -4,5 +4,12 @@ security: ignore-cvss-severity-below: 0 ignore-cvss-unknown-severity: False + ignore-vulnerabilities: + 64227: # Vulnerability found in jinja2 version 3.1.2 - https://data.safetycli.com/v/64227/97c + expires: '2024-05-30' + 67895: # Vulnerability found in idna version 3.4 - https://data.safetycli.com/v/67895/97c + expires: '2024-05-30' + 66742: # Vulnerability found in black version 23.12.1 - https://data.safetycli.com/v/66742/97c + expires: '2024-05-30' continue-on-vulnerability-error: False diff --git a/pyproject.toml b/pyproject.toml index 6cf4e67..e1d8d0e 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -40,19 +40,19 @@ aiofiles = ">=0.8" # https://pypi.org/project/aiofiles/#history shellingham = ">=1.3.0" # https://pypi.org/project/shellingham/#history [tool.poetry.dev-dependencies] -black = "^23.12" # https://pypi.org/project/black/#history -flake8 = "^7.0" # https://pypi.org/project/flake8/#history -isort = "^5.13" # https://pypi.org/project/isort/#history -mypy = "^1.8" # https://pypi.org/project/mypy/#history -pycln = "^2.4" # https://pypi.org/project/pycln/#history -pytest = "^7.4" # https://pypi.org/project/pytest/#history -safety = "^3.0.1" # https://pypi.org/project/safety/#history -urllib3 = "~2.1" # https://pypi.org/project/urllib3/#history -types-aiofiles = "23.2" # https://pypi.org/project/types-aiofiles/#history +black = ">=23.0" # https://pypi.org/project/black/#history +flake8 = ">=7.0" # https://pypi.org/project/flake8/#history +isort = ">=5.13" # https://pypi.org/project/isort/#history +mypy = ">=1.8" # https://pypi.org/project/mypy/#history +pycln = ">=2.4" # https://pypi.org/project/pycln/#history +pytest = ">=7.4" # https://pypi.org/project/pytest/#history +safety = ">=3.0.1" # https://pypi.org/project/safety/#history +urllib3 = ">=2.1" # https://pypi.org/project/urllib3/#history +types-aiofiles = ">=23.2" # https://pypi.org/project/types-aiofiles/#history # NB: pip installs in .readthedocs.yml need to be kept up-to-date manually -novella = "^0.2" # https://pypi.org/project/novella/#history -pydoc-markdown = "^4.8" # https://pypi.org/project/pydoc-markdown/#history -mkdocs-material = "^9.5" # https://pypi.org/project/mkdocs-material/#history +novella = ">=0.2" # https://pypi.org/project/novella/#history +pydoc-markdown = ">=4.8" # https://pypi.org/project/pydoc-markdown/#history +mkdocs-material = ">=9.5" # https://pypi.org/project/mkdocs-material/#history [tool.poetry.plugins."slap.plugins.check"] changelog = "slap.ext.checks.changelog:ChangelogValidationCheckPlugin"