From b110186f536d92356c6541058bd84d404e8dc53f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 5 Nov 2022 05:22:35 +0000 Subject: [PATCH] fix: dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773 --- dev_requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/dev_requirements.txt b/dev_requirements.txt index 09f09f1c..f05a737b 100644 --- a/dev_requirements.txt +++ b/dev_requirements.txt @@ -4,7 +4,7 @@ nose2 pbr==1.8.1 numpydoc==0.4; python_version>='3.0' sphinx>=2.1.0; python_version>='3.5' -sphinx==1.8.5; python_version<'3.5' +sphinx==3.0.4; python_version<'3.5' testresources>=0.2.7 jsonschema==2.6.0 configparser==3.5.0 @@ -19,3 +19,4 @@ python-vagrant>=0.5.15 pytest git+https://github.com/couchbaselabs/sphinx-autodoc-typehints.git; python_version>='3.0' git+https://github.com/couchbaselabs/mypy.git@stub-merge; python_version>'3.10' +pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability