From 59c8ff3dc8b5ebd4f948e14367b09050010ba7bf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Jun 2024 19:42:39 +0000 Subject: [PATCH] fix: requirements_for_test.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829 --- requirements_for_test.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements_for_test.txt b/requirements_for_test.txt index 1e0987c2..2b29860b 100644 --- a/requirements_for_test.txt +++ b/requirements_for_test.txt @@ -14,4 +14,5 @@ pytest-profiling==1.7.0 redis>=4.3.4 # Earlier versions of redis miss features the tests need snakeviz==2.1.1 black==23.10.1 # Also update `.pre-commit-config.yaml` if this changes -ruff==0.0.272 # Also update `.pre-commit-config.yaml` if this changes \ No newline at end of file +ruff==0.0.272 # Also update `.pre-commit-config.yaml` if this changes +tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file