From 14e85464236abae6b38147ddb363b8400d710f22 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 22 Mar 2023 00:45:22 +0000 Subject: [PATCH 1/5] fix: upgrade @playwright/test from 1.28.0 to 1.31.1 Snyk has created this PR to upgrade @playwright/test from 1.28.0 to 1.31.1. See this package in npm: https://www.npmjs.com/package/@playwright/test See this project in Snyk: https://app.snyk.io/org/jwood3794/project/d325e4a5-f19a-4ac8-90fb-d846016551c4?utm_source=github&utm_medium=referral&page=upgrade-pr --- playwright/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/playwright/package.json b/playwright/package.json index 1306837b679..89f8bb835bc 100644 --- a/playwright/package.json +++ b/playwright/package.json @@ -7,7 +7,7 @@ "test:debug": "playwright test --debug" }, "devDependencies": { - "@playwright/test": "1.28.0", + "@playwright/test": "1.31.1", "eslint": "8.28.0", "eslint-config-standard": "17.0.0", "eslint-plugin-import": "2.26.0", From f7693c0701d28560ef2c31c2bf57929c4c5d163d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 22 Mar 2023 00:45:27 +0000 Subject: [PATCH 2/5] fix: upgrade npm-check-updates from 16.4.1 to 16.7.10 Snyk has created this PR to upgrade npm-check-updates from 16.4.1 to 16.7.10. See this package in npm: https://www.npmjs.com/package/npm-check-updates See this project in Snyk: https://app.snyk.io/org/jwood3794/project/d325e4a5-f19a-4ac8-90fb-d846016551c4?utm_source=github&utm_medium=referral&page=upgrade-pr --- playwright/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/playwright/package.json b/playwright/package.json index 1306837b679..0168c013087 100644 --- a/playwright/package.json +++ b/playwright/package.json @@ -14,7 +14,7 @@ "eslint-plugin-n": "15.5.1", "eslint-plugin-node": "11.1.0", "eslint-plugin-promise": "6.1.1", - "npm-check-updates": "16.4.1" + "npm-check-updates": "16.7.10" }, "dependencies": { "@faker-js/faker": "7.6.0", From db0ebe85f65981f880798f43668d5303d1b45f83 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Mar 2023 19:17:16 +0000 Subject: [PATCH 3/5] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2940618 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index a0e7953d147..be0c7c45865 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,7 +9,7 @@ celery>=5.2.6 coverage>=4.5.4,<5.0 # Coverage 5.x moves from a json database to SQLite. Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views decorator>=5.1.1 defusedxml>=0.7.1 # for TastyPie when using xml; not a declared dependency -Django>=2.2.28,<3.0 +Django>=3.2.14,<3.0 django-analytical>=3.1.0 django-bootstrap5>=21.3 django-celery-beat>=2.3.0 From 5ccce1f38c44bac8dac8a997f3dcc665433e009a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 3 Jun 2023 02:57:03 +0000 Subject: [PATCH 4/5] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-VITE-5664718 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index b59fb4a55c4..fb2ece9d630 100644 --- a/package.json +++ b/package.json @@ -71,7 +71,7 @@ "pug": "3.0.2", "sass": "1.56.2", "seedrandom": "3.0.5", - "vite": "3.2.5" + "vite": "3.2.7" }, "targets": { "ietf": { From 09c20cc9fc94ddbb751967939984c681b7ccaffa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Nov 2023 21:07:19 +0000 Subject: [PATCH 5/5] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index be0c7c45865..85405dc50bc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -44,7 +44,7 @@ mock>=4.0.3 # Used only by tests, of course mypy>=0.782,<0.790 # Version requirements determined by django-stubs. mysqlclient>=2.1.0 oic>=1.3 # Used only by tests -Pillow>=9.1.0 +Pillow>=10.0.0 pyang>=2.5.3 pyflakes>=2.4.0 pyopenssl>=22.0.0 # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency