From f078ec1c4c6e1ea231f90975e5ebadd69ca24cc3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 6 Dec 2024 03:29:28 +0000 Subject: [PATCH] fix: lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456315 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456316 --- .../manager/pip_requirements/__fixtures__/requirements5.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt b/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt index de53ecbede9cd0..bb11f398165218 100644 --- a/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt +++ b/lib/modules/manager/pip_requirements/__fixtures__/requirements5.txt @@ -2,7 +2,7 @@ --index-url https://artifactory.company.com/artifactory/api/pypi/python/simple --trusted-host artifactory.company.com --default-timeout 600 --extra-index-url http://example.com/private-pypi/ # Packages -Django[argon2]==2.0.12 +Django==4.2.17 celery [redis]==4.1.1 foo [bar] == 3.2.1 # handles extra white space some-package==0.3.1