Merge pull request #24 from robusta-dev/main-2070-fix-cve

Updated zipp and urllib3 packages to fix CVEs
robusta-dev · Sep 6, 2024 · b9acec8 · b9acec8
2 parents 068f66e + 474e11f
commit b9acec8
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 12 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -18,10 +18,12 @@ pydantic = "^2.7.0"
 prometheus-api-client = "^0.5.3"
 pillow = "^10.3.0" # added to Pin transitive dependency, not needed directly
 fonttools = "^4.43.0" # added to Pin transitive dependency, not needed directly
-urllib3 = "^1.26.18" # added to Pin transitive dependency, not needed directly
+urllib3 = "^1.26.20" # added to Pin transitive dependency, not needed directly
+zipp = "^3.20.1" # added to Pin transitive dependency, not needed directly
 idna = "^3.7"
 requests = "^2.32.0"
 
+
 [tool.poetry.group.test]
 optional = true