Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency pydantic to v2.10.3 #305

Merged
merged 2 commits into from
Dec 5, 2024
Merged

chore(deps): update dependency pydantic to v2.10.3 #305

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
39dbcd0
chore(deps): update dependency pydantic to v2.10.3
renovate[bot] Dec 3, 2024
c83bdac
fix: update trivyignore
amandahla Dec 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .trivyignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
# wee_alloc is Unmaintained https://github.com/advisories/GHSA-rc23-xxgq-x27g
GHSA-rc23-xxgq-x27g

Check notice on line 2 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

GHSA-rc23-xxgq-x27g not present anymore, can be safely removed.
# pebble
CVE-2024-34156

Check notice on line 4 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2024-34156 not present anymore, can be safely removed.
# shlex from ruby test
GHSA-r7qv-8r2h-pg27

Check notice on line 6 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

GHSA-r7qv-8r2h-pg27 not present anymore, can be safely removed.
# squoosh npm package
CVE-2021-32810

Check notice on line 8 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2021-32810 not present anymore, can be safely removed.
CVE-2022-23639

Check notice on line 9 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2022-23639 not present anymore, can be safely removed.
# Ruby Gems
CVE-2024-7254

Check notice on line 11 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2024-7254 not present anymore, can be safely removed.
CVE-2015-9284

Check notice on line 12 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2015-9284 not present anymore, can be safely removed.
CVE-2017-11430

Check notice on line 13 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2017-11430 not present anymore, can be safely removed.
CVE-2024-45409

Check notice on line 14 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

CVE-2024-45409 not present anymore, can be safely removed.
GHSA-cvp8-5r8g-fhvq

Check notice on line 15 in .trivyignore

View workflow job for this annotation

GitHub Actions / integration-tests / Scan Image (ghcr.io-canonical-discourse-b59a4d82d70a03c93f39a2c7e70ed079d058823d-_1.0_amd64.tar) 

GHSA-cvp8-5r8g-fhvq not present anymore, can be safely removed.
CVE-2024-49761
CVE-2024-45409
CVE-2024-47220
Expand All @@ -28,3 +28,5 @@
CVE-2024-45296 # path-to-regexp
CVE-2024-37890 # ws
private-key
# Kernel
CVE-2024-53103
2 changes: 1 addition & 1 deletion requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
ops==2.17.1
pydantic==2.10.2
pydantic==2.10.3
Loading