[PATCH 1/1] python: Update requirements.txt for security issues
Tom Rini
trini at konsulko.com
Tue May 30 21:50:30 CEST 2023
Per GitHub Dependabot:
- Use setuptools 65.5.1 to avoid some DoS issue
- Use requests 2.31.0 to avoid leaking some proxy information
Signed-off-by: Tom Rini <trini at konsulko.com>
---
Cc: Simon Glass <sjg at chromium.org>
Cc: Heinrich Schuchardt <xypron.glpk at gmx.de>
---
doc/sphinx/requirements.txt | 2 +-
test/py/requirements.txt | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/doc/sphinx/requirements.txt b/doc/sphinx/requirements.txt
index f9f6cc6e928b..aed449211711 100644
--- a/doc/sphinx/requirements.txt
+++ b/doc/sphinx/requirements.txt
@@ -11,7 +11,7 @@ packaging==21.3
Pygments==2.11.2
pyparsing==3.0.7
pytz==2022.1
-requests==2.27.1
+requests==2.31.0
six==1.16.0
snowballstemmer==2.2.0
Sphinx==3.4.3
diff --git a/test/py/requirements.txt b/test/py/requirements.txt
index 86d6266053fd..f7e76bdb9181 100644
--- a/test/py/requirements.txt
+++ b/test/py/requirements.txt
@@ -20,8 +20,8 @@ pytest==6.2.5
pytest-xdist==2.5.0
python-mimeparse==1.6.0
python-subunit==1.3.0
-requests==2.27.1
-setuptools==58.3.0
+requests==2.31.0
+setuptools==65.5.1
six==1.16.0
testtools==2.3.0
traceback2==1.4.0
--
2.34.1
More information about the U-Boot
mailing list