Skip to content

Commit

Permalink
fix: requirements-dev.txt to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-8400708
  • Loading branch information
snyk-bot committed Nov 23, 2024
1 parent 22238e8 commit 6502d95
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion requirements-dev.txt
Original file line number Diff line number Diff line change
Expand Up @@ -32,5 +32,5 @@ xmltodict >= 0.12

# test requirements for extra packages
zarr >= 2.13.3
tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability
tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability
requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit 6502d95

Please sign in to comment.