From 4fae7032a67a59fc484b7dd69f9acca349ad080b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 7 Jan 2023 05:22:31 +0000 Subject: [PATCH] fix: test-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 --- test-requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/test-requirements.txt b/test-requirements.txt index bedd6669..3376a08d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2,3 +2,5 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 oslosphinx>=2.5.0 # Apache-2.0 reno>=0.1.1 # Apache-2.0 +certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability +pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability