Skip to content

Commit 00e3620

Browse files
authored
Generate a new requirements.txt to fix CVEs (#90109)
Hi! Here is a patch for #81859 that fix the vulnerabilities found in gitpython, cryptography, urllib3 and requests. I have just regenerated the requirements.txt files running pip-compile again. Fortunately, this was enough to set all the dependencies on safe versions. I have also checked if new vulnerabilities were introduced by running scorecard on my fork, but none has been introduced. Thanks! Signed-off-by: Joyce Brum <[email protected]>
1 parent 88da875 commit 00e3620

File tree

2 files changed

+26
-28
lines changed

2 files changed

+26
-28
lines changed

llvm/utils/git/requirements.txt

Lines changed: 14 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -4,41 +4,39 @@
44
#
55
# pip-compile --output-file=requirements.txt requirements.txt.in
66
#
7-
certifi==2023.7.22
7+
certifi==2024.2.2
88
# via
99
# -r requirements.txt.in
1010
# requests
11-
cffi==1.15.1
11+
cffi==1.16.0
1212
# via
1313
# cryptography
1414
# pynacl
15-
charset-normalizer==2.1.1
15+
charset-normalizer==3.3.2
1616
# via requests
17-
cryptography==41.0.3
17+
cryptography==42.0.5
1818
# via pyjwt
19-
deprecated==1.2.13
19+
deprecated==1.2.14
2020
# via pygithub
21-
gitdb==4.0.9
21+
gitdb==4.0.11
2222
# via gitpython
23-
gitpython==3.1.32
23+
gitpython==3.1.43
2424
# via -r requirements.txt.in
25-
idna==3.4
25+
idna==3.7
2626
# via requests
27-
pycparser==2.21
27+
pycparser==2.22
2828
# via cffi
2929
pygithub==1.59.1
3030
# via -r requirements.txt.in
31-
pyjwt[crypto]==2.5.0
31+
pyjwt[crypto]==2.8.0
3232
# via pygithub
3333
pynacl==1.5.0
3434
# via pygithub
35-
requests==2.28.1
35+
requests==2.31.0
3636
# via pygithub
37-
smmap==5.0.0
37+
smmap==5.0.1
3838
# via gitdb
39-
types-cryptography==3.3.23.2
40-
# via pyjwt
41-
urllib3==1.26.12
39+
urllib3==2.2.1
4240
# via requests
43-
wrapt==1.14.1
41+
wrapt==1.16.0
4442
# via deprecated

llvm/utils/git/requirements_formatting.txt

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -4,37 +4,37 @@
44
#
55
# pip-compile --output-file=llvm/utils/git/requirements_formatting.txt llvm/utils/git/requirements_formatting.txt.in
66
#
7-
black==23.9.1
7+
black==23.12.1
88
# via
99
# -r llvm/utils/git/requirements_formatting.txt.in
1010
# darker
11-
certifi==2023.7.22
11+
certifi==2024.2.2
1212
# via requests
13-
cffi==1.15.1
13+
cffi==1.16.0
1414
# via
1515
# cryptography
1616
# pynacl
17-
charset-normalizer==3.2.0
17+
charset-normalizer==3.3.2
1818
# via requests
1919
click==8.1.7
2020
# via black
21-
cryptography==41.0.3
21+
cryptography==42.0.5
2222
# via pyjwt
2323
darker==1.7.2
2424
# via -r llvm/utils/git/requirements_formatting.txt.in
2525
deprecated==1.2.14
2626
# via pygithub
27-
idna==3.4
27+
idna==3.7
2828
# via requests
2929
mypy-extensions==1.0.0
3030
# via black
31-
packaging==23.1
31+
packaging==24.0
3232
# via black
33-
pathspec==0.11.2
33+
pathspec==0.12.1
3434
# via black
35-
platformdirs==3.10.0
35+
platformdirs==4.2.1
3636
# via black
37-
pycparser==2.21
37+
pycparser==2.22
3838
# via cffi
3939
pygithub==1.59.1
4040
# via -r llvm/utils/git/requirements_formatting.txt.in
@@ -46,7 +46,7 @@ requests==2.31.0
4646
# via pygithub
4747
toml==0.10.2
4848
# via darker
49-
urllib3==2.0.4
49+
urllib3==2.2.1
5050
# via requests
51-
wrapt==1.15.0
51+
wrapt==1.16.0
5252
# via deprecated

0 commit comments

Comments
 (0)