fix: tools/release/dependencies/requirements.txt to reduce vulnerabil…

…ities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
konflux-ci · May 9, 2024 · c25c859 · c25c859
1 parent 8adf96e
commit c25c859
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tools/release/dependencies/requirements.txt b/tools/release/dependencies/requirements.txt
@@ -3,3 +3,7 @@ click
 jira
 pyyaml
 dogpile.cache
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability