fix(deps): update dependency pyyaml to v5.4 [security] (#1935)

* fix(deps): update dependency pyyaml to v5.4 [security] * Bump PyYAML to 6.0.1, bump utils version --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: wbanks <[email protected]>
cds-snc · Sep 12, 2023 · e692b51 · e692b51
1 parent 8caba67
commit e692b51
Show file tree

Hide file tree

Showing 2 changed files with 59 additions and 22 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -46,7 +46,7 @@ python-magic = "0.4.27"
 psycopg2-binary = "2.9.7"
 PyJWT = "2.8.0"
 pytz = "2021.3"
-PyYAML = "5.3.1"
+PyYAML = "6.0.1"
 SQLAlchemy = "1.4.49"
 cachelib = "0.10.2"
 newrelic = "6.10.0.165"
@@ -65,7 +65,7 @@ Werkzeug = "2.3.7"
 MarkupSafe = "2.1.3"
 # REVIEW: v2 is using sha512 instead of sha1 by default (in v1)
 itsdangerous = "2.1.2"
-notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", rev = "52.0.8" }
+notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", rev = "52.0.9" }
 # rsa = "4.9  # awscli 1.22.38 depends on rsa<4.8
 typing-extensions = "4.7.1"
 greenlet = "2.0.2"