Fixed safety issues 7/2023

Signed-off-by: Andreas Maier <maiera@de.ibm.com>
zhmcclient · Jul 5, 2023 · 5dbc68e · 5dbc68e
1 parent f6d5f32
commit 5dbc68e
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/.safety-policy.yml b/.safety-policy.yml
@@ -58,6 +58,8 @@ security:
             reason: Fixed GitPython version requires Python>=3.7 and is used there
         58755:
             reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there
+        58910:
+            reason: Fixed pygments version 2.15.0 requires Python>=3.7 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/dev-requirements.txt b/dev-requirements.txt
@@ -87,7 +87,8 @@ GitPython>=2.1.1; python_version >= '3.5' and python_version <= '3.6'
 GitPython>=3.1.30; python_version >= '3.7'
 # Pygments 2.7.4 fixes safety issues 50885,50886
 Pygments>=2.1.3; python_version == '2.7'
-Pygments>=2.7.4; python_version >= '3.5'
+Pygments>=2.7.4; python_version >= '3.5' and python_version <= '3.6'
+Pygments>=2.15.0; python_version >= '3.7'
 sphinx-rtd-theme>=1.0.0
 # Babel 2.7.0 fixes an ImportError for MutableMapping which starts failing on Python 3.10
 # Babel 2.9.1 fixes safety issue 42203

diff --git a/docs/changes.rst b/docs/changes.rst
@@ -31,6 +31,9 @@ Released: not yet
 
 **Bug fixes:**
 
+* Addressed safety issues from 7/2023, by increasing packages only needed for
+  development.
+
 **Enhancements:**
 
 **Cleanup:**

diff --git a/minimum-constraints.txt b/minimum-constraints.txt
@@ -204,7 +204,8 @@ GitPython==2.1.1; python_version <= '3.6'
 GitPython==3.1.30; python_version >= '3.7'
 sphinxcontrib-websupport==1.1.2
 Pygments==2.1.3; python_version == '2.7'
-Pygments==2.7.4; python_version >= '3.5'
+Pygments==2.7.4; python_version >= '3.5' and python_version <= '3.6'
+Pygments==2.15.0; python_version >= '3.7'
 sphinx-rtd-theme==1.0.0
 Babel==2.9.1