From 5f861c5668c3e7688663b7c7a448a86444289aff Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 2 May 2023 17:57:25 +0000 Subject: [PATCH] fix: deps/uv/docs/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BABEL-1278589 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1014645 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 --- deps/uv/docs/requirements.txt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/deps/uv/docs/requirements.txt b/deps/uv/docs/requirements.txt index 8386e0178fabac..9229d532ef0795 100644 --- a/deps/uv/docs/requirements.txt +++ b/deps/uv/docs/requirements.txt @@ -4,9 +4,9 @@ Sphinx==3.5.4 # dependencies alabaster==0.7.12 appdirs==1.4.3 -Babel==2.9.0 +Babel==2.9.1 CacheControl==0.12.6 -certifi==2019.11.28 +certifi==2022.12.7 chardet==3.0.4 colorama==0.4.3 contextlib2==0.6.0 @@ -38,5 +38,6 @@ sphinxcontrib-htmlhelp==1.0.3 sphinxcontrib-jsmath==1.0.1 sphinxcontrib-qthelp==1.0.3 sphinxcontrib-serializinghtml==1.1.4 -urllib3==1.25.8 +urllib3==1.26.5 webencodings==0.5.1 +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability