From 6065179080e69a1fe82b7fce4390ee7bba7979f5 Mon Sep 17 00:00:00 2001 From: Sagar Vora Date: Wed, 24 May 2023 15:05:50 +0530 Subject: [PATCH] chore: bump `requests`, `chardet`, and `dropbox` to latest versions (#21080) * chore: bump `requests` and `chardet` * chore: bump `dropbox` to `11.36.0`, ignore `GHSA-4xqq-73wg-5mjp` during pip-audit --- .github/workflows/linters.yml | 2 +- pyproject.toml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml index be343c1254..c563f9e43f 100644 --- a/.github/workflows/linters.yml +++ b/.github/workflows/linters.yml @@ -97,4 +97,4 @@ jobs: pip install pip-audit cd ${GITHUB_WORKSPACE} sed -i '/dropbox/d' pyproject.toml # Remove dropbox temporarily https://github.com/dropbox/dropbox-sdk-python/pull/456 - pip-audit --desc on . + pip-audit --desc on --ignore-vuln GHSA-4xqq-73wg-5mjp . diff --git a/pyproject.toml b/pyproject.toml index f2688e97ed..aa89eed928 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -30,7 +30,7 @@ dependencies = [ "bleach-allowlist~=1.0.3", "bleach~=3.3.0", "cairocffi==1.2.0", - "chardet~=4.0.0", + "chardet~=5.1.0", "croniter~=1.3.5", "cryptography~=39.0.1", "email-reply-parser~=0.5.12", @@ -61,7 +61,7 @@ dependencies = [ "redis~=4.5.4", "hiredis~=2.0.0", "requests-oauthlib~=1.3.0", - "requests~=2.27.1", + "requests~=2.31.0", "rq~=1.11.1", "rsa>=4.1", "semantic-version~=2.10.0", @@ -75,7 +75,7 @@ dependencies = [ # integration dependencies "boto3~=1.18.49", - "dropbox~=11.7.0", + "dropbox~=11.36.0", "google-api-python-client~=2.2.0", "google-auth-oauthlib~=0.4.4", "google-auth~=1.29.0",