From 4757606203b35058546f41f1abbff30bf7026f68 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 27 Mar 2024 18:45:26 +0000 Subject: [PATCH] fix: networking-calico/test-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DNSPYTHON-6241713 - https://snyk.io/vuln/SNYK-PYTHON-NEUTRON-1577285 - https://snyk.io/vuln/SNYK-PYTHON-NEUTRON-3031732 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 --- networking-calico/test-requirements.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/networking-calico/test-requirements.txt b/networking-calico/test-requirements.txt index 6e708fcef6f..19f0604632a 100644 --- a/networking-calico/test-requirements.txt +++ b/networking-calico/test-requirements.txt @@ -2,7 +2,7 @@ # of appearance. Changing the order has an impact on the overall integration # process, which may cause wedges in the gate later. -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL +setuptools!=65.5.1,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL hacking<0.11,>=0.10.0 @@ -16,7 +16,8 @@ testrepository>=0.0.18 # Apache-2.0/BSD testscenarios>=0.4 # Apache-2.0/BSD testtools>=2.2.0 # MIT -neutron>=16,<17 +neutron>=21.0.0.0rc1,<17 neutron-lib==2.3.0 mock>=3.0.0 # BSD pyroute2<0.6.0 # Apache v2 +dnspython>=2.6.1 # not directly required, pinned by Snyk to avoid a vulnerability