Commit b76febe5 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

build: fix CVEs

parent 92732a82

poetry.lock

+14 −14
Original line number Diff line number Diff line 
# This file is automatically @generated by Poetry 2.3.3 and should not be changed by hand.

# This file is automatically @generated by Poetry 2.4.1 and should not be changed by hand.



[[package]]

name = "certifi"
@@ -274,14 +274,14 @@ smmap = ">=3.0.1,<6" 


[[package]]

name = "gitpython"

version = "3.1.49"

version = "3.1.50"

description = "GitPython is a Python library used to interact with Git repositories"

optional = false

python-versions = ">=3.7"

groups = ["main"]

files = [

    {file = "gitpython-3.1.49-py3-none-any.whl", hash = "sha256:024b0422d7f84d15cd794844e029ffebd4c5d42a7eb9b936b458697ef550a02c"},

    {file = "gitpython-3.1.49.tar.gz", hash = "sha256:42f9399c9eb33fc581014bedd76049dfbaf6375aa2a5754575966387280315e1"},

    {file = "gitpython-3.1.50-py3-none-any.whl", hash = "sha256:d352abe2908d07355014abdd21ddf798c2a961469239afec4962e9da884858f9"},

    {file = "gitpython-3.1.50.tar.gz", hash = "sha256:80da2d12504d52e1f998772dc5baf6e553f8d2fcfe1fcc226c9d9a2ee3372dcc"},

]



[package.dependencies]
@@ -293,18 +293,18 @@ test = ["coverage[toml]", "ddt (>=1.1.1,!=1.4.3)", "mock ; python_version < \"3. 


[[package]]

name = "idna"

version = "3.10"

version = "3.17"

description = "Internationalized Domain Names in Applications (IDNA)"

optional = false

python-versions = ">=3.6"

python-versions = ">=3.9"

groups = ["main"]

files = [

    {file = "idna-3.10-py3-none-any.whl", hash = "sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3"},

    {file = "idna-3.10.tar.gz", hash = "sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9"},

    {file = "idna-3.17-py3-none-any.whl", hash = "sha256:466e48829084efe2548012b855df21540b96f2e20e51bd124c851536556a592c"},

    {file = "idna-3.17.tar.gz", hash = "sha256:5eb0cb53bc467c12eadcf6de83163ad8527cec9416f44b9b61b19caedad2b87f"},

]



[package.extras]

all = ["flake8 (>=7.1.1)", "mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]

all = ["mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]



[[package]]

name = "iniconfig"
@@ -750,14 +750,14 @@ files = [ 


[[package]]

name = "urllib3"

version = "2.6.3"

version = "2.7.0"

description = "HTTP library with thread-safe connection pooling, file post, and more."

optional = false

python-versions = ">=3.9"

python-versions = ">=3.10"

groups = ["main"]

files = [

    {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"},

    {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"},

    {file = "urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897"},

    {file = "urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c"},

]



[package.extras]
@@ -769,4 +769,4 @@ zstd = ["backports-zstd (>=1.0.0) ; python_version < \"3.14\""] 
[metadata]

lock-version = "2.1"

python-versions = ">=3.12"

content-hash = "2d49baac673e0d86eda5386aec2d1d498a47effc9f7e00986b315763c284d3bd"
 
content-hash = "93bf8d1a68a218c0f1b8d358edbdf967bb40b78595984b4432d6dd4f6399cff3"

pyproject.toml

+8 −1
Original line number Diff line number Diff line
@@ -10,7 +10,14 @@ authors = [{ name = "Pierre Smeyers", email = "pierre.smeyers@gmail.com" }] 
license = "LGPL"

readme = "README.md"

requires-python = ">=3.12"

dependencies = ["requests (>=2.33.0,<4.0.0)", "python-gitlab (>=8.3.0,<8.4.0)", "gitpython (>=3.1.43,<4.0.0)", "urllib3 (>=2.6.3,<3.0.0)"]

dependencies = [

  "idna (>=3.15,<4.0)",

  "urllib3 (>=2.7.0,<3.0.0)", 

  "requests (>=2.33.0,<4.0.0)", 

  "python-gitlab (>=8.3.0,<8.4.0)", 

  "gitpython (>=3.1.50,<4.0.0)", 

  "urllib3 (>=2.6.3,<3.0.0)",

]



[project.scripts]

gitlab-cp = "gitlab_cp.sync:run"