From 08e7623c217b93ba1aa28e804d183b07ecb9185d Mon Sep 17 00:00:00 2001 From: "gh-worker-campaigns-3e9aa4[bot]" <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 20:25:04 +0000 Subject: [PATCH] =?UTF-8?q?ADMS:=20vuln=20minor:=20requests=20=C2=B7=20pat?= =?UTF-8?q?ch:=20flask,=20pytest=20[pkg/extractor]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../pyproject-toml-extractor/duplicate-groups/pyproject.toml | 4 ++-- .../pyproject-toml-extractor/no-pinned/pyproject.toml | 4 ++-- .../pyproject-toml-extractor/pep621-optional/pyproject.toml | 4 ++-- .../pyproject-toml-extractor/pep621-pinned/pyproject.toml | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/pkg/extractor/fixtures/pyproject-toml-extractor/duplicate-groups/pyproject.toml b/pkg/extractor/fixtures/pyproject-toml-extractor/duplicate-groups/pyproject.toml index cedeb3a8..de729653 100644 --- a/pkg/extractor/fixtures/pyproject-toml-extractor/duplicate-groups/pyproject.toml +++ b/pkg/extractor/fixtures/pyproject-toml-extractor/duplicate-groups/pyproject.toml @@ -2,10 +2,10 @@ name = "my-app" version = "1.0.0" dependencies = [ - "requests==2.28.0", + "requests==2.34.2", ] [project.optional-dependencies] dev = [ - "requests==2.28.0", + "requests==2.34.2", ] diff --git a/pkg/extractor/fixtures/pyproject-toml-extractor/no-pinned/pyproject.toml b/pkg/extractor/fixtures/pyproject-toml-extractor/no-pinned/pyproject.toml index 8b9f358a..20622970 100644 --- a/pkg/extractor/fixtures/pyproject-toml-extractor/no-pinned/pyproject.toml +++ b/pkg/extractor/fixtures/pyproject-toml-extractor/no-pinned/pyproject.toml @@ -2,7 +2,7 @@ name = "my-app" version = "1.0.0" dependencies = [ - "requests>=2.28", - "flask~=2.3", + "requests>=2.34.2", + "flask~=2.3.3", "numpy", ] diff --git a/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-optional/pyproject.toml b/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-optional/pyproject.toml index 522d7ef3..161a8665 100644 --- a/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-optional/pyproject.toml +++ b/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-optional/pyproject.toml @@ -2,12 +2,12 @@ name = "my-lib" version = "1.0.0" dependencies = [ - "requests==2.28.0", + "requests==2.34.2", ] [project.optional-dependencies] dev = [ - "pytest==7.4.0", + "pytest==7.4.4", "mypy==1.5.0", ] docs = [ diff --git a/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-pinned/pyproject.toml b/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-pinned/pyproject.toml index 256d9d1e..ee937a36 100644 --- a/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-pinned/pyproject.toml +++ b/pkg/extractor/fixtures/pyproject-toml-extractor/pep621-pinned/pyproject.toml @@ -2,8 +2,8 @@ name = "my-app" version = "1.0.0" dependencies = [ - "requests==2.28.0", - "flask==2.3.2", + "requests==2.34.2", + "flask==2.3.3", "numpy>=1.24", "scipy", "boto3==1.26.0",