From bc04fa5f575d94dc898c6e0ff50fd498a956104a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 4 Oct 2023 04:43:59 +0000 Subject: [PATCH] fix: requirements.dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-IPYTHON-3318382 - https://snyk.io/vuln/SNYK-PYTHON-NOTEBOOK-2441824 - https://snyk.io/vuln/SNYK-PYTHON-NOTEBOOK-2928995 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5840803 --- requirements.dev.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/requirements.dev.txt b/requirements.dev.txt index 35e6f3b2..80649223 100644 --- a/requirements.dev.txt +++ b/requirements.dev.txt @@ -10,7 +10,7 @@ interrogate==1.3.2 ipykernel==5.5.0 isort==5.6.4 mypy==0.790 -notebook==6.4.1 +notebook==6.4.12 papermill==2.3.1 pep8-naming==0.11.1 pre-commit==2.11.1 @@ -20,3 +20,6 @@ pytest-cov==2.10.1 pytest-order==1.0.0 pytest-xdist[psutil] safety +ipython>=8.10.0 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability