fix: tightened dependency packageurl-python (#95)

fixes #94 Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
CycloneDX · Dec 9, 2021 · eb4ae5c · eb4ae5c
1 parent 43fc36e
commit eb4ae5c
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -43,7 +43,7 @@ keywords = [
 [tool.poetry.dependencies]
 # ATTENTION: keep `requirements.lowest.txt` file in sync
 python = "^3.6"
-packageurl-python = ">= 0.3"
+packageurl-python = ">= 0.9"
 requirements_parser = ">= 0.2"
 setuptools = ">= 47.0.0"
 importlib-metadata = { version = ">= 3.4", python = "< 3.8" }

diff --git a/requirements.lowest.txt b/requirements.lowest.txt
@@ -1,7 +1,7 @@
 # exactly pinned dependencies to the lowest version regardless of python_version
 # see pyptoject file for ranges
 
-packageurl-python == 0.3.0
+packageurl-python == 0.9.0
 requirements_parser == 0.2.0
 setuptools == 47.0.0
 importlib-metadata == 3.4.0 # ; python_version < '3.8'