Skip to content

Commit 55f479e

Browse files
committed
Fix python package vulnerabilities
1 parent 4b6a1c4 commit 55f479e

2 files changed

Lines changed: 12 additions & 5 deletions

File tree

Makefile

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
.PHONY: setup dev dev-backend dev-frontend test lint format migrate makemigrations shell dbshell reset-db deps-up seed-majors seed-courses seed-data build check-osv-scanner osv-scan-python osv-scan-frontend osv-scan help
1+
.PHONY: setup dev dev-backend dev-frontend test lint format migrate makemigrations shell dbshell reset-db deps-up seed-majors seed-courses seed-data build check-osv-scanner scan-python scan-frontend scan osv-scan-python osv-scan-frontend osv-scan help
22

33
help: ## Show this help message
44
@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-20s\033[0m %s\n", $$1, $$2}'
@@ -63,7 +63,7 @@ seed-data: ## Seed majors and courses (requires DB, network, and scraper credent
6363
build: ## Build frontend for production
6464
cd frontend && bun run build
6565

66-
check-scanner: ## Verify osv-scanner is installed
66+
check-osv-scanner: ## Verify osv-scanner is installed
6767
@command -v osv-scanner >/dev/null 2>&1 || (echo "osv-scanner not found. Install it from https://google.github.io/osv-scanner/"; exit 1)
6868

6969
scan-python: ## Scan Python dependencies with OSV Scanner
@@ -78,4 +78,10 @@ scan: ## Scan Python + frontend dependencies with OSV Scanner
7878
@$(MAKE) check-osv-scanner
7979
osv-scanner scan source -L requirements.txt -L frontend/package-lock.json
8080

81+
osv-scan-python: scan-python ## Alias for scan-python
82+
83+
osv-scan-frontend: scan-frontend ## Alias for scan-frontend
84+
85+
osv-scan: scan ## Alias for scan
86+
8187
.DEFAULT_GOAL := help

requirements.txt

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Web framework
2-
Django==4.2.16
2+
Django==4.2.28
33
gunicorn==22.0.0
44
whitenoise==6.7.0
55

@@ -19,15 +19,16 @@ django-widget-tweaks==1.4.3
1919
python-dotenv==0.21.1
2020

2121
# Data scraping & processing
22-
requests==2.28.2
22+
requests==2.32.4
2323
beautifulsoup4==4.11.2
2424
lxml==4.9.4
2525
redis==5.0.8
2626

2727
# Utilities
2828
pytz==2018.9
2929
python-dateutil==2.8.2
30-
cryptography==39.0.1
30+
cryptography==46.0.5
31+
urllib3==2.6.3
3132
PyYAML==6.0.2
3233
APScheduler==3.7.0
3334

0 commit comments

Comments
 (0)