Commit 4494a1e7 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

build: fix CVEs

parent daa45407

poetry.lock

+7 −7
Original line number Diff line number Diff line 
# This file is automatically @generated by Poetry 2.1.4 and should not be changed by hand.

# This file is automatically @generated by Poetry 2.4.1 and should not be changed by hand.



[[package]]

name = "boolean-py"
@@ -271,18 +271,18 @@ files = [ 


[[package]]

name = "idna"

version = "3.10"

version = "3.17"

description = "Internationalized Domain Names in Applications (IDNA)"

optional = false

python-versions = ">=3.6"

python-versions = ">=3.9"

groups = ["main"]

files = [

    {file = "idna-3.10-py3-none-any.whl", hash = "sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3"},

    {file = "idna-3.10.tar.gz", hash = "sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9"},

    {file = "idna-3.17-py3-none-any.whl", hash = "sha256:466e48829084efe2548012b855df21540b96f2e20e51bd124c851536556a592c"},

    {file = "idna-3.17.tar.gz", hash = "sha256:5eb0cb53bc467c12eadcf6de83163ad8527cec9416f44b9b61b19caedad2b87f"},

]



[package.extras]

all = ["flake8 (>=7.1.1)", "mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]

all = ["mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]



[[package]]

name = "iniconfig"
@@ -763,4 +763,4 @@ zstd = ["backports-zstd (>=1.0.0) ; python_version < \"3.14\""] 
[metadata]

lock-version = "2.1"

python-versions = ">=3.12,<4.0"

content-hash = "4a16f14e31b74317528f68a82a31ce8efc84aa7f62cc6ad1eb8480c5d1819f88"
 
content-hash = "20ae5885d51db4e59d21f200d38a0a7944df313a58277e0c3799e7c8f86cbb6e"

pyproject.toml

+6 −1
Original line number Diff line number Diff line
@@ -11,7 +11,12 @@ license = "MIT" 
license-files = ["LICENSE"]

readme = "README.md"

requires-python = ">=3.12,<4.0"

dependencies = ["requests (>=2.32.5,<4.0.0)", "urllib3 (>=2.6.0,<3.0.0)", "cyclonedx-python-lib (>=11.1.0,<12.0.0)"]

dependencies = [

  "idna (>=3.15,<4.0)",

  "requests (>=2.32.5,<4.0.0)", 

  "urllib3 (>=2.7.0,<3.0.0)", 

  "cyclonedx-python-lib (>=11.1.0,<12.0.0)"

]

keywords = ['tool', 'sbom', 'dependency track']

classifiers = [

  "Development Status :: 4 - Beta",