Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot updates #11060

Open
wants to merge 23 commits into
base: master
Choose a base branch
from
Open

Dependabot updates #11060

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
b9eb9d6
chore(deps): bump eth-account from 0.2.2 to 0.5.9 in /requirements
dependabot[bot] Nov 1, 2022
5022a4e
Merge pull request #1 from Abuchtela/dependabot/pip/requirements/eth-…
Abuchtela Dec 19, 2022
578c1a0
Merge branch 'gitcoinco:master' into master
Abuchtela Jan 23, 2023
dc94524
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Sep 24, 2023
effd2c4
Merge pull request #45 from Abuchtela/snyk-fix-c70eae1ff8fc68a58f0a1e…
Abuchtela Sep 24, 2023
4043475
fix: ops/lambdas/welcomebot/requirements.txt to reduce vulnerabilities
snyk-bot Dec 3, 2023
30a486a
Merge pull request #66 from Abuchtela/snyk-fix-2d77baafe32b67072f7e15…
Abuchtela Dec 19, 2023
d26351b
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Jun 25, 2024
9139959
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Jul 19, 2024
843ad47
fix: package.json & yarn.lock to reduce vulnerabilities
snyk-bot Jul 27, 2024
023b3a8
fix: package.json & yarn.lock to reduce vulnerabilities
snyk-bot Jul 31, 2024
856d714
Merge pull request #121 from Abuchtela/snyk-fix-28b202c8a56bb618cf4cb…
Abuchtela Aug 2, 2024
cdedcc9
Merge pull request #119 from Abuchtela/snyk-fix-81774f48f0cc21511b4ff…
Abuchtela Aug 2, 2024
ebeaf9e
Merge pull request #120 from Abuchtela/snyk-fix-024e08d4106385815c989…
Abuchtela Aug 4, 2024
a210cc9
Merge pull request #111 from Abuchtela/snyk-fix-17fb8a98ca8ecafd9ad75…
Abuchtela Aug 4, 2024
098a0da
fix: requirements/test.txt to reduce vulnerabilities
snyk-bot Aug 8, 2024
3f5239d
Merge pull request #123 from Abuchtela/snyk-fix-9836f54c4402c658d1697…
Abuchtela Aug 9, 2024
99bec76
fix: infra/staging/package.json & infra/staging/package-lock.json to …
snyk-bot Oct 21, 2024
4b7ec31
fix: infra/review-pr/package.json & infra/review-pr/package-lock.json…
snyk-bot Oct 22, 2024
541912a
Merge pull request #138 from Abuchtela/snyk-fix-ced880eb3c6f53f2241b4…
Abuchtela Oct 30, 2024
ba16cd1
Merge pull request #137 from Abuchtela/snyk-fix-e64e865cc70b9cec497d4…
Abuchtela Oct 30, 2024
0e66bbc
fix: requirements/base.txt to reduce vulnerabilities
snyk-bot Dec 6, 2024
5e2d7da
Merge pull request #143 from Abuchtela/snyk-fix-2ea6e61a50d9af6c6bd6a…
Abuchtela Dec 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7,745 changes: 6,711 additions & 1,034 deletions infra/review-pr/package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion infra/review-pr/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
"@types/node": "^14"
},
"dependencies": {
"@pulumi/aws": "^4.0.0",
"@pulumi/aws": "^6.56.0",
"@pulumi/awsx": "^0.30.0",
"@pulumi/pulumi": "^3.0.0",
"@types/mime": "^2.0.3",
Expand Down
7,329 changes: 6,442 additions & 887 deletions infra/staging/package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion infra/staging/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
},
"dependencies": {
"@pulumi/pulumi": "^3.0.0",
"@pulumi/aws": "^5.0.0",
"@pulumi/aws": "^6.56.0",
"@pulumi/awsx": "^0.40.0"
}
}
3 changes: 3 additions & 0 deletions ops/lambdas/welcomebot/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,6 @@ zappa
flask
slackeventsapi
slackclient
aiohttp>=3.9.0 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=2.3.8 # not directly required, pinned by Snyk to avoid a vulnerability
wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability
2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@
"@joeattardi/emoji-button": "^3.1.1",
"@popperjs/core": "^2.10.2",
"@truffle/hdwallet-provider": "^2.0.0",
"bootstrap": "4.6.0",
"bootstrap": "5.0.0",
"bootstrap-vue": "2.18.0",
"daterangepicker": "3.0.5",
"dompurify": "^2.2.9",
Expand Down
12 changes: 6 additions & 6 deletions requirements/base.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,21 +4,21 @@ cryptocompare==0.6
cryptography==2.3
celery==4.4.0
django-celery-beat==1.1.1
django==2.2.24
django==4.2.17
django-csp==3.7
django-cors-headers==2.4.0
django-filter==2.0.0
django-haystack
django-ratelimit==1.1.0
djangorestframework==3.11.2
djangorestframework==3.15.2
gitterpy
gunicorn
matplotlib
Markdown==3.2.1
reportlab==3.5.55
reportlab==3.6.13
requests
requests_oauthlib
Pillow==8.3.2
Pillow==9.0.0
premailer
populus
psycopg2-binary==2.8
Expand Down Expand Up @@ -59,7 +59,7 @@ Werkzeug[watchdog]==0.15.5
imageio
boto3==1.18.22
django-storages==1.11.1
eth-account==0.2.2
eth-account==0.5.9
django-classy-tags==0.8.0
django-cookie-law==2.0.1
django-impersonate==1.3
Expand All @@ -84,7 +84,7 @@ redis-semaphore
watchtower==1.0.6
Wand==0.4.4
raven==6.9.0
sentry-sdk==1.1.0
sentry-sdk==2.8.0
websocket-client
bleach
python-magic
Expand Down
1 change: 1 addition & 0 deletions requirements/test.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,4 @@ didkit==0.2.1
datar==0.8.6
pdtypes==0.0.4
importlib-metadata==4.13.0
django>=4.2.15 # not directly required, pinned by Snyk to avoid a vulnerability
7 changes: 6 additions & 1 deletion yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2259,7 +2259,12 @@ [email protected]:
portal-vue "^2.1.7"
vue-functional-data-merge "^3.1.0"

[email protected], "bootstrap@>=4.5.3 <5.0.0":
[email protected]:
version "5.0.0"
resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-5.0.0.tgz#97635ac0e0d6cb466700ebf0fd266bfabf352ed2"
integrity sha512-tmhPET9B9qCl8dCofvHeiIhi49iBt0EehmIsziZib65k1erBW1rHhj2s/2JsuQh5Pq+xz2E9bEbzp9B7xHG+VA==

"bootstrap@>=4.5.3 <5.0.0":
version "4.6.0"
resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-4.6.0.tgz#97b9f29ac98f98dfa43bf7468262d84392552fd7"
integrity sha512-Io55IuQY3kydzHtbGvQya3H+KorS/M9rSNyfCGCg9WZ4pyT/lCxIlpJgG1GXW/PswzC84Tr2fBYi+7+jFVQQBw==
Expand Down