Commit 89687312 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

build: fix CVEs

parent 474cbc1d

poetry.lock

+17 −17
Original line number Diff line number Diff line
@@ -267,18 +267,18 @@ toml = ["tomli ; python_full_version <= \"3.11.0a6\""] 


[[package]]

name = "idna"

version = "3.11"

version = "3.17"

description = "Internationalized Domain Names in Applications (IDNA)"

optional = false

python-versions = ">=3.8"

python-versions = ">=3.9"

groups = ["main", "dev"]

files = [

    {file = "idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea"},

    {file = "idna-3.11.tar.gz", hash = "sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902"},

    {file = "idna-3.17-py3-none-any.whl", hash = "sha256:466e48829084efe2548012b855df21540b96f2e20e51bd124c851536556a592c"},

    {file = "idna-3.17.tar.gz", hash = "sha256:5eb0cb53bc467c12eadcf6de83163ad8527cec9416f44b9b61b19caedad2b87f"},

]



[package.extras]

all = ["flake8 (>=7.1.1)", "mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]

all = ["mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]



[[package]]

name = "iniconfig"
@@ -877,25 +877,25 @@ files = [ 


[[package]]

name = "requests"

version = "2.32.5"

version = "2.34.2"

description = "Python HTTP for Humans."

optional = false

python-versions = ">=3.9"

python-versions = ">=3.10"

groups = ["main", "dev"]

files = [

    {file = "requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6"},

    {file = "requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf"},

    {file = "requests-2.34.2-py3-none-any.whl", hash = "sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0"},

    {file = "requests-2.34.2.tar.gz", hash = "sha256:f288924cae4e29463698d6d60bc6a4da69c89185ad1e0bcc4104f584e960b9ed"},

]



[package.dependencies]

certifi = ">=2017.4.17"

certifi = ">=2023.5.7"

charset_normalizer = ">=2,<4"

idna = ">=2.5,<4"

urllib3 = ">=1.21.1,<3"

urllib3 = ">=1.26,<3"



[package.extras]

socks = ["PySocks (>=1.5.6,!=1.5.7)"]

use-chardet-on-py3 = ["chardet (>=3.0.2,<6)"]

use-chardet-on-py3 = ["chardet (>=3.0.2,<8)"]



[[package]]

name = "requests-toolbelt"
@@ -1001,14 +1001,14 @@ typing-extensions = ">=4.12.0" 


[[package]]

name = "urllib3"

version = "2.6.3"

version = "2.7.0"

description = "HTTP library with thread-safe connection pooling, file post, and more."

optional = false

python-versions = ">=3.9"

python-versions = ">=3.10"

groups = ["main", "dev"]

files = [

    {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"},

    {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"},

    {file = "urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897"},

    {file = "urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c"},

]



[package.extras]
@@ -1020,4 +1020,4 @@ zstd = ["backports-zstd (>=1.0.0) ; python_version < \"3.14\""] 
[metadata]

lock-version = "2.1"

python-versions = ">=3.12,<4.0"

content-hash = "1fa2a55d202b8ddb8bc076d315a11b8d8eb57ea8cc57a59fc38eff5a99f191d0"
 
content-hash = "cb15d99679d25e7a52e17485919158c9525feee6c43ea896bb6d2d05b83dbd6b"

pyproject.toml

+3 −1
Original line number Diff line number Diff line
@@ -12,11 +12,13 @@ license-files = ["LICENSE"] 
readme = "README.md"

requires-python = ">=3.12,<4.0"

dependencies = [

    "idna (>=3.15,<4.0)",

    "python-gitlab (>=8.0.0,<8.1.0)",

    "pydantic (>=2.7.4,<3.0.0)",

    "pyyaml (>=6.0.1,<7.0.0)",

    "requests (>=2.33.0,<3.0.0)",

    "types-pyyaml (>=6.0.12.20240917,<7.0.0)",

    "urllib3 (>=2.6.3,<3.0.0)",

    "urllib3 (>=2.7.0,<3.0.0)",

]

keywords = ['tool', 'GitLab', 'CI/CD', 'housekeeping']

classifiers = [