From e6b1709b7dc72f691d61ee37a445b2a67e66ba1d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Dec 2021 23:40:24 +0000 Subject: [PATCH] fix: dev/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BLEACH-1069893 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-NOTEBOOK-1041707 - https://snyk.io/vuln/SNYK-PYTHON-NOTEBOOK-1567195 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 --- dev/requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/dev/requirements.txt b/dev/requirements.txt index 27ceb4c..a13c770 100644 --- a/dev/requirements.txt +++ b/dev/requirements.txt @@ -1,6 +1,6 @@ attrs==19.3.0 backcall==0.2.0 -bleach==3.1.5 +bleach==3.3.0 decorator==4.4.2 defusedxml==0.6.0 entrypoints==0.3 @@ -10,7 +10,7 @@ ipython==7.16.1 ipython-genutils==0.2.0 ipywidgets==7.5.1 jedi==0.17.2 -Jinja2==2.11.2 +Jinja2==2.11.3 jsonschema==3.2.0 jupyter==1.0.0 jupyter-client==6.1.6 @@ -20,7 +20,7 @@ MarkupSafe==1.1.1 mistune==0.8.4 nbconvert==5.6.1 nbformat==5.0.7 -notebook==6.0.3 +notebook==6.4.1 packaging==20.4 pandocfilters==1.4.2 parso==0.7.1 @@ -29,7 +29,7 @@ pickleshare==0.7.5 prometheus-client==0.8.0 prompt-toolkit==3.0.5 ptyprocess==0.6.0 -Pygments==2.6.1 +Pygments==2.7.4 pyparsing==2.4.7 pyrsistent==0.16.0 python-dateutil==2.8.1