chore: bump requests, chardet, and dropbox to latest versions (#21080)

* chore: bump `requests` and `chardet`

* chore: bump `dropbox` to `11.36.0`, ignore `GHSA-4xqq-73wg-5mjp` during pip-audit
This commit is contained in:
Sagar Vora 2023-05-24 15:05:50 +05:30 committed by GitHub
parent 49fe6e0c98
commit 6065179080
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 4 deletions

View file

@ -97,4 +97,4 @@ jobs:
pip install pip-audit
cd ${GITHUB_WORKSPACE}
sed -i '/dropbox/d' pyproject.toml # Remove dropbox temporarily https://github.com/dropbox/dropbox-sdk-python/pull/456
pip-audit --desc on .
pip-audit --desc on --ignore-vuln GHSA-4xqq-73wg-5mjp .

View file

@ -30,7 +30,7 @@ dependencies = [
"bleach-allowlist~=1.0.3",
"bleach~=3.3.0",
"cairocffi==1.2.0",
"chardet~=4.0.0",
"chardet~=5.1.0",
"croniter~=1.3.5",
"cryptography~=39.0.1",
"email-reply-parser~=0.5.12",
@ -61,7 +61,7 @@ dependencies = [
"redis~=4.5.4",
"hiredis~=2.0.0",
"requests-oauthlib~=1.3.0",
"requests~=2.27.1",
"requests~=2.31.0",
"rq~=1.11.1",
"rsa>=4.1",
"semantic-version~=2.10.0",
@ -75,7 +75,7 @@ dependencies = [
# integration dependencies
"boto3~=1.18.49",
"dropbox~=11.7.0",
"dropbox~=11.36.0",
"google-api-python-client~=2.2.0",
"google-auth-oauthlib~=0.4.4",
"google-auth~=1.29.0",