From 98caa6ec5778784c4a759f43db6225b02fbcdf6e Mon Sep 17 00:00:00 2001 From: Andreas Maier Date: Wed, 20 Mar 2024 18:57:38 +0100 Subject: [PATCH] Reduced ignore rules in safety policy files Details: * Since we reduced running some development tools only on newer Python versions, that allowed dropping older versions of some dependent packages used for development. This change removes ignore statements in the safety policy files that are no longer needed because of that. Signed-off-by: Andreas Maier --- .safety-policy-all.yml | 18 ++---------------- .safety-policy-install.yml | 6 ------ 2 files changed, 2 insertions(+), 22 deletions(-) diff --git a/.safety-policy-all.yml b/.safety-policy-all.yml index ce9cf04..bb971e0 100644 --- a/.safety-policy-all.yml +++ b/.safety-policy-all.yml @@ -26,28 +26,14 @@ security: ignore-vulnerabilities: 39611: reason: Fixed PyYAML versions 5.4 to 6.0.0 do not work with Cython 3, and the full_load method or FullLoader is not used - 43975: - reason: Fixed Urllib3 versions are excluded by requests 51457: reason: Py package will no longer be fixed (latest version 1.11.0) - 51499: - reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side - 52322: - reason: Fixed GitPython version requires Python>=3.7 and is used there + # 51499: + # reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side 52495: reason: Fixed Setuptools version requires Python>=3.7 and is used there; Risk is on Pypi side - 52518: - reason: Fixed GitPython version requires Python>=3.7 and is used there 58755: reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there - 58910: - reason: Fixed pygments version 2.15.0 requires Python>=3.7 and is used there - 60350: - reason: Fixed GitPython version 3.1.32 requires Python>=3.7 and is used there - 60789: - reason: Fixed GitPython version 3.1.33 requires Python>=3.7 and is used there - 60841: - reason: Fixed GitPython version 3.1.35 requires Python>=3.7 and is used there 62044: reason: Fixed pip version 23.3 requires Python>=3.7 and is used there 64227: diff --git a/.safety-policy-install.yml b/.safety-policy-install.yml index 6f6887c..32c9039 100644 --- a/.safety-policy-install.yml +++ b/.safety-policy-install.yml @@ -26,18 +26,12 @@ security: ignore-vulnerabilities: 39611: reason: PyYAML full_load method or FullLoader is not used - 43975: - reason: Fixed Urllib3 versions are excluded by requests 51499: reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side 52495: reason: Fixed Setuptools version requires Python>=3.7 and is used there; Risk is on Pypi side 58755: reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there - 61601: - reason: Fixed urllib3 version 1.26.17 requires Python>=3.6 and is used there - 61893: - reason: Fixed urllib3 version 1.26.18 requires Python>=3.6 and is used there 62044: reason: Fixed pip version 23.3 requires Python>=3.7 and is used there