From 458f89f30ec7da24d39871e86ab7359bee8a7c02 Mon Sep 17 00:00:00 2001 From: Naga Ravi Chaitanya Elluri Date: Thu, 7 May 2026 15:31:07 -0400 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities (#1276) The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-16438979 - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-16438980 Signed-off-by: Paige Patton Co-authored-by: snyk-bot --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 4611bda8..cde6f616 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,7 +9,7 @@ azure-mgmt-network==27.0.0 coverage==7.6.12 datetime==5.4 docker>=6.0,<7.0 # docker 7.0+ has breaking changes; upgrade to 7.x to allow requests>=2.33.0 -gitpython==3.1.47 +gitpython==3.1.49 google-auth==2.37.0 google-cloud-compute==1.22.0 ibm_cloud_sdk_core>=3.20.0 # Requires urllib3>=2.1.0 (compatible with updated boto3)