fix: [Snyk] min vers for indirect depdencies with vulns (#4224)

* fix: doc/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 * ci: add new reqs to .csv --------- Co-authored-by: snyk-bot <[email protected]>
intel · Jun 28, 2024 · 8bf3852 · 8bf3852
1 parent 2941eef
commit 8bf3852
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/doc/requirements.csv b/doc/requirements.csv
@@ -4,3 +4,5 @@ ryanfox_not_in_db,sphinx_markdown_tables
 executablebooks_not_in_db,myst_parser
 anthonyharrison_not_in_db,sbom2doc
 pillow,pillow
+python,requests
+python,urllib3
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -3,3 +3,5 @@ sphinx_markdown_tables
 myst_parser==3.0.1
 sbom2doc
 pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability