Skip to content

Commit

Permalink
Bump requests from 2.31.0 to 2.32.0, fl4health from 0.1.13 to 0.1.15 …
Browse files Browse the repository at this point in the history
…and torchvision from 0.14.1 to 0.16.0 (#45)

* ---
updated-dependencies:
- dependency-name: requests
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updating wandb

* Updating static code checks to ignore wandb being wrongly reported

* Also upgrading fl4health to latest

* Skipping cryptography security vulnerability

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marcelo Lotif <[email protected]>
  • Loading branch information
dependabot[bot] and lotif authored May 21, 2024
1 parent 469a9be commit 49f79f1
Show file tree
Hide file tree
Showing 3 changed files with 363 additions and 160 deletions.
15 changes: 6 additions & 9 deletions .github/workflows/static_code_checks.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -49,13 +49,10 @@ jobs:
uses: pypa/[email protected]
with:
virtual-environment: .venv/
# Ignoring security vulnerabilities in Pillow because pycyclops cannot update it to the
# version that fixes them (>10.3.0).
# Remove those when FL4Health is released with the update to pillow > 10
# Skipping 3 cryptography issues that can't be patched because of Flower
# Skipping 1 wandb issue that was rolled back, seems like a pip-audit bug
ignore-vulns: |
PYSEC-2023-175
PYSEC-2023-227
GHSA-j7hp-h8jx-5ppr
GHSA-56pw-mpj4-fxww
GHSA-3f63-hfp8-52jq
GHSA-44wm-f244-xhp3
GHSA-3ww4-gg4f-jr7f
GHSA-9v9h-cgj8-h64p
GHSA-6vqw-3v5j-54x4
GHSA-cqh9-jfqr-h9jj
Loading

0 comments on commit 49f79f1

Please sign in to comment.