From 16e64cb53a16d4a86b0a03dd262ab5ed5257b339 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 24 Dec 2024 20:21:47 +0000 Subject: [PATCH] fix: integration_tests/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- integration_tests/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/integration_tests/requirements.txt b/integration_tests/requirements.txt index 89c6ccb..50546f1 100644 --- a/integration_tests/requirements.txt +++ b/integration_tests/requirements.txt @@ -4,3 +4,5 @@ dbt-redshift~=1.0.0 dbt-postgres~=1.0.0 dbt-spark~=1.0.0 dbt-spark[PyHive]~=1.0.0 +jinja2>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability