Security/pin cryptography 41.0.2 (#258)

* Pin cryptography dep to address mishandled SSH certs * Add section to pyproject.toml for pinned deps * Make pinned dep section more general
cds-snc · Nov 23, 2023 · 356b90b · 356b90b
1 parent cf57bb2
commit 356b90b
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 25 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -41,7 +41,9 @@ boto3 = "1.28.84"
 werkzeug = "2.3.7"
 itsdangerous = "2.1.2"
 
-certifi = "^2023.7.22" # Pinned for security issue: https://github.com/cds-snc/notification-utils/security/dependabot/22
+# Pinned dependencies
+certifi = "^2023.7.22" # pinned for security reasons: https://github.com/cds-snc/notification-utils/security/dependabot/22
+cryptography = "^41.0.2" # pinned for security reasons: https://github.com/cds-snc/notification-utils/security/dependabot/21
 
 [tool.poetry.group.test.dependencies]
 pytest = "7.4.3"