diff --git a/dev-requirements.txt b/dev-requirements.txt index 0cba948..e96d6f8 100644 --- a/dev-requirements.txt +++ b/dev-requirements.txt @@ -23,7 +23,6 @@ pytest-cov>=2.7.0 coveralls>=3.3.0 # Safety CI by pyup.io -# safety 2.2.0 resolves safety issue #51358 safety>=2.2.0 # safety 2.2.0 requires dparse>=0.6.2 dparse>=0.6.2 @@ -34,7 +33,6 @@ Click>=8.0.2 # PyYAML is pulled in by dparse # PyYAML 5.3.1 addressed issue 38100 reported by safety -# PyYAML 5.4 fixes safety issue 39611 # PyYAML 5.3 has wheel archives for Python 2.7, 3.5 - 3.9 # PyYAML 5.4 has wheel archives for Python 2.7, 3.6 - 3.9 # PyYAML 6.0 has wheel archives for Python 3.6 - 3.11 @@ -57,7 +55,6 @@ tox>=3.21.0 Sphinx>=4.2.0 docutils>=0.16,<0.17 sphinx-git>=10.1.1 -# GitPython 3.1.30 fixes safety issues 52322,52518 GitPython>=2.1.1; python_version == '3.6' GitPython>=3.1.37; python_version >= '3.7' sphinxcontrib-fulltoc>=1.2.0 @@ -65,7 +62,6 @@ sphinxcontrib-websupport>=1.1.2 Pygments>=2.1.3 sphinx-rtd-theme>=1.0.0 # Babel 2.7.0 fixes an ImportError for MutableMapping which starts failing on Python 3.10 -# Babel 2.9.1 fixes safety issue 42203 Babel>=2.9.1 # PyLint (no imports, invoked via pylint script) diff --git a/minimum-constraints.txt b/minimum-constraints.txt index 3b40304..bc7bef8 100644 --- a/minimum-constraints.txt +++ b/minimum-constraints.txt @@ -13,16 +13,13 @@ # pip 10.0.0 introduced the --exclude-editable option. # Pip 20.2 introduced a new resolver whose backtracking had issues that were resolved only in 21.2.2. # pip>=21.0 is needed for the cryptography package on Windows on GitHub Actions. -# pip 21.1 fixes safety issues 42559,40291 pip==21.3.1; python_version == '3.6' pip==23.3; python_version >= '3.7' # setuptools 59.7.0 removed support for py36 -# setuptools 65.5.1 fixes safety issue 52495 setuptools==59.6.0; python_version == '3.6' setuptools==65.5.1; python_version >= '3.7' -# wheel 0.38.1 fixes safety issue 51499 wheel==0.33.5; python_version == '3.6' wheel==0.38.1; python_version >= '3.7'