Addressed safety issues up to 2024-05-21

Signed-off-by: Andreas Maier <andreas.r.maier@gmx.de>
pywbem · May 21, 2024 · e60d167 · e60d167
1 parent b5d5b8a
commit e60d167
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 2 deletions.
diff --git a/.safety-policy-install.yml b/.safety-policy-install.yml
@@ -44,6 +44,10 @@ security:
             reason: Fixed pip version 23.3 requires Python>=3.7 and is used there
         62817:
             reason: Fixed prompt-toolkit version 3.0.13 requires Python>=3.6 and is used there
+        67599:
+            reason: There is no fixed pip version
+        67895:
+            reason: Fixed idna version 3.7 requires requests>=2.26.0 which requires Python>=3.6 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/docs/changes.rst b/docs/changes.rst
@@ -16,6 +16,10 @@ Released: not yet
 
 **Bug fixes:**
 
+* Addressed safety issues up to 2024-05-21.
+
+* Fixed new issues reported by Pylint 3.2.
+
 * For Python 3.6 and 3.7, changed macos-latest back to macos-12 because
   macos-latest got upgraded from 12 to 14 and no longer supports Python 3.6
   and 3.7.

diff --git a/minimum-constraints-install.txt b/minimum-constraints-install.txt
@@ -98,7 +98,7 @@ urllib3==1.26.18; python_version >= '3.7'
 
 ply==3.10
 requests==2.25.0; python_version == '2.7'
-requests==2.25.0; python_version == '3.6'
+requests==2.26.0; python_version == '3.6'
 requests==2.31.0; python_version >= '3.7'
 certifi==2019.11.28; python_version == '2.7'
 certifi==2023.07.22; python_version >= '3.6'
@@ -110,4 +110,6 @@ wcwidth==0.1.7
 typing-extensions==3.10.0
 
 # requests 2.31 requires idna>=2.5,<4
-idna==2.8
+# idna>3 requires using requests >=2.26.0
+idna==2.8; python_version <= '3.5'
+idna==3.7; python_version >= '3.6'