[miniconda] - tqdm - GHSA-g7vv-2v7x-gj9p vulnerability

Author: gauravsaini04

src/miniconda/.devcontainer/Dockerfile

@@ -10,7 +10,9 @@ RUN python3 -m pip install --upgrade \
     # https://github.com/advisories/GHSA-6vqw-3v5j-54x4
     cryptography==42.0.4 \
     # installed for compatibility with cryptography v42.0.4
-    pyopenssl==24.0.0
+    pyopenssl==24.0.0 \
+    # https://github.com/advisories/GHSA-g7vv-2v7x-gj9p
+    tqdm==4.66.3
 
 # Reset and copy updated files with updated privs to keep image size down
 FROM mcr.microsoft.com/devcontainers/base:1-bullseye

src/miniconda/test-project/test.sh

@@ -21,6 +21,7 @@ check "usr-local-etc-config-does-not-exist" test ! -f "/usr/local/etc/gitconfig"
 checkPythonPackageVersion "cryptography" "42.0.4"
 checkPythonPackageVersion "setuptools" "65.5.1"
 checkPythonPackageVersion "wheel" "0.38.1"
+checkPythonPackageVersion "tqdm" "4.66.3"
 
 checkCondaPackageVersion "cryptography" "42.0.4"
 checkCondaPackageVersion "pyopenssl" "24.0.0"