Safety issues up to 2024-11-30

Signed-off-by: Andreas Maier <[email protected]>
pywbem · Dec 1, 2024 · eb21411 · eb21411
1 parent 7a89f38
commit eb21411
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 5 deletions.
diff --git a/.safety-policy.yml b/.safety-policy.yml
@@ -64,6 +64,8 @@ security:
             reason: Fixed zipp version 3.19.1 requires Python>=3.8 and is used there
         72236:
             reason: Fixed setuptools version 70.0.0 requires Python>=3.8 and is used there
+        73456:
+            reason: Fixed virtualenv version 20.26.6 requires Python>=3.8 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/dev-requirements.txt b/dev-requirements.txt
@@ -110,7 +110,7 @@ dill>=0.3.6; python_version >= '3.7' and python_version <= '3.11'
 dill>=0.3.7; python_version >= '3.12'
 # platformdirs is used by pylint starting with its 2.10
 platformdirs>=2.2.0; python_version <= '3.11'
-platformdirs>=3.2.0; python_version >= '3.12'
+platformdirs>=3.9.1; python_version >= '3.12'
 
 # Mypy (no imports, invoked via mypy script)
 # Mypy 0.981 removed support for py36

diff --git a/docs/changes.rst b/docs/changes.rst
@@ -16,6 +16,8 @@ Released: not yet
 
 **Bug fixes:**
 
+* Addressed safety issues up to 2024-11-30.
+
 * Test: Fixed the issue that coveralls was not found in the test workflow on MacOS
   with Python 3.9-3.11, by running it without login shell. Added Python 3.11 on
   MacOS to the normal tests.

diff --git a/minimum-constraints.txt b/minimum-constraints.txt
@@ -45,7 +45,7 @@ pytest==7.0.0
 
 # virtualenv
 virtualenv==20.2.1; python_version <= '3.7'
-virtualenv==20.23.0; python_version >= '3.8'
+virtualenv==20.26.6; python_version >= '3.8'
 
 # Indirect dependencies for test (must be consistent with test-requirements.txt, if present)
 
@@ -137,7 +137,7 @@ dill==0.3.6; python_version >= '3.7' and python_version <= '3.11'
 dill==0.3.7; python_version >= '3.12'
 
 platformdirs==2.2.0; python_version == '3.6'
-platformdirs==3.2.0; python_version >= '3.7'
+platformdirs==3.9.1; python_version >= '3.7'
 
 # Mypy (no imports, invoked via mypy script)
 mypy==0.971
@@ -191,7 +191,7 @@ chardet==3.0.3
 distlib==0.3.7
 docopt==0.6.1
 filelock==3.2.0; python_version == '3.6'
-filelock==3.11.0; python_version >= '3.7'
+filelock==3.12.2; python_version >= '3.7'
 gitdb==4.0.1
 # idna>3 requires using requests >=2.26.0
 idna==3.7

diff --git a/test-requirements.txt b/test-requirements.txt
@@ -22,7 +22,7 @@ pytest>=7.0.0
 # virtualenv 20.2.1 started removing the prior pinning of importlib-metadata to <3
 # tox 3.21.0 requires virtualenv!=20.0.[0-7],>=16.0.0 and requires Python >=3.5
 virtualenv>=20.2.1,<20.16.3; python_version <= '3.7'
-virtualenv>=20.23.0; python_version >= '3.8'
+virtualenv>=20.26.6; python_version >= '3.8'
 
 
 # Indirect dependencies with special constraints: