From 22f90c47b1371a673babdcc60ca44cd069f48c26 Mon Sep 17 00:00:00 2001 From: Matthew Hughes Date: Wed, 4 Dec 2024 21:42:54 +0000 Subject: [PATCH] Ignore security issue with `mkdocs-material` This requires handling upstream (see linked issue), trying to bump this dependency errored with: Because mkdocs-material (9.5.32) depends on mkdocs (>=1.6,<2.0) and portray (1.8.0) depends on mkdocs (>=1.3.0,<1.4.0), mkdocs-material (9.5.32) is incompatible with portray (1.8.0). And because no versions of portray match >1.8.0, mkdocs-material (9.5.32) is incompatible with portray (>=1.8.0). So, because isort depends on both portray (>=1.8.0) and mkdocs-material (9.5.32), version solving failed. --- scripts/lint.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/scripts/lint.sh b/scripts/lint.sh index bd6a856b..ca71cc7d 100755 --- a/scripts/lint.sh +++ b/scripts/lint.sh @@ -7,5 +7,7 @@ poetry run black --target-version py38 . poetry run isort --profile hug --check --diff isort/ tests/ poetry run isort --profile hug --check --diff example_*/ poetry run flake8 isort/ tests/ -poetry run safety check -i 51457 -i 59587 # https://github.com/tiangolo/typer/discussions/674 + # 51457: https://github.com/tiangolo/typer/discussions/674 + # 72715: https://github.com/timothycrosley/portray/issues/95 +poetry run safety check -i 72715 -i 51457 -i 59587 poetry run bandit -r isort/ -x isort/_vendored