From 6cd55eadbca424466d97795d389e5d345e311da9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 9 Nov 2022 02:43:50 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3092128 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 6f2148a..994475c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,7 +9,7 @@ mlspeclib==0.0.24 msgpack==1.0.0 pymysql==0.9.3 python-box==4.2.3 -pyyaml==5.3.1 +pyyaml==5.4 ruamel.yaml.clib==0.2.0 ; python_version < '3.9' and platform_python_implementation == 'CPython' ruamel.yaml==0.16.10 semver==2.10.1 @@ -18,4 +18,4 @@ smmap==3.0.4 ; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, toml==0.10.1 tornado==5.1.1 ; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3' uritools==3.0.0 ; python_version ~= '3.5' -wheel==0.34.2 ; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4' +wheel==0.38.0 ; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'