From e78648ddb42a30c0d8fcf309e045cf6793500937 Mon Sep 17 00:00:00 2001 From: Hans Kuhn Date: Mon, 2 Oct 2023 11:18:04 -0700 Subject: [PATCH 1/2] Update pytest version to remove py dependency Dependabot flagged 'py' as being vulnerable to a DoS. It likely doesn't affect us, but the recommendation is that 'pytest' removed dependency on 'py' in 7.2.0 so let's do that. This is discussed in a thread found here: https://github.com/pytest-dev/py/issues/287#issuecomment-1290407715 --- python-client/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python-client/requirements.txt b/python-client/requirements.txt index 192b535..f2b2b7a 100644 --- a/python-client/requirements.txt +++ b/python-client/requirements.txt @@ -16,7 +16,7 @@ py==1.11.0 pyasn1==0.4.8 pyasn1-modules==0.2.8 pyparsing==3.0.7 -pytest==6.2.5 +pytest==7.2.0 requests==2.31.0 rsa==4.8 six==1.15.0 From 95b3bc4dbf4d6dc687545cd60c76d758f7305ea5 Mon Sep 17 00:00:00 2001 From: Hans Kuhn Date: Mon, 2 Oct 2023 11:22:08 -0700 Subject: [PATCH 2/2] Remove 'py' py is a dependency of pytest so can be removed as of pytest version==7.2.0. --- python-client/requirements.txt | 1 - 1 file changed, 1 deletion(-) diff --git a/python-client/requirements.txt b/python-client/requirements.txt index f2b2b7a..dc2cf89 100644 --- a/python-client/requirements.txt +++ b/python-client/requirements.txt @@ -12,7 +12,6 @@ iniconfig==1.1.1 packaging==21.3 pluggy==1.0.0 protobuf==3.18.3 -py==1.11.0 pyasn1==0.4.8 pyasn1-modules==0.2.8 pyparsing==3.0.7