Commit 366fd64
authored
Fix all open Dependabot Python alerts in Pipfiles (#8488)
## Summary
This PR addresses all currently open Dependabot alerts in this
repository by updating vulnerable Python dependencies in both mirrored
regression-test environments:
- src/test/regress/Pipfile / Pipfile.lock
- .devcontainer/src/test/regress/Pipfile / Pipfile.lock
## Updated dependencies
- cryptography: 44.0.3 -> 46.0.5 (patched: >=46.0.5)
- Werkzeug: 3.1.4 -> 3.1.5 (patched: >=3.1.5)
- filelock: resolved to 3.25.0 (patched: >=3.20.3)
- pyasn1: resolved to 0.6.2 (patched: >=0.6.2)
## Alerts covered
Closes Dependabot alerts: #98, #99, #100, #101, #102, #103, #104, #105,
#106, #107, #108, #109.
## Notes
Lockfiles were regenerated with pipenv lock in both directories to
ensure consistent, hashed resolution.1 parent d3330fd commit 366fd64
File tree
6 files changed
+218
-194
lines changed- .devcontainer
- src/test/regress
- .github/workflows
- src/test/regress
6 files changed
+218
-194
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
97 | 97 | | |
98 | 98 | | |
99 | 99 | | |
100 | | - | |
| 100 | + | |
101 | 101 | | |
102 | 102 | | |
103 | 103 | | |
| |||
216 | 216 | | |
217 | 217 | | |
218 | 218 | | |
219 | | - | |
| 219 | + | |
220 | 220 | | |
221 | 221 | | |
222 | 222 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
28 | | - | |
| 28 | + | |
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments