From 7887a644f0d6457e7afcd66e30898de02827b37d Mon Sep 17 00:00:00 2001 From: Francis Charette Migneault Date: Thu, 9 Mar 2023 12:33:54 -0500 Subject: [PATCH 1/2] pin 'ziggurat_foundations==0.9.1' for latest sqlalchemy-related security fixes (fixes #574) --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index e2de572e8..6af6a86c7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -60,6 +60,6 @@ typing_extensions; python_version < "3.8" wheel; python_version <= "3.6" wheel>=0.38; python_version >= "3.7" webob -ziggurat_foundations==0.8.4 +ziggurat_foundations==0.9.1 zope.interface>=4.7.2,<5 zope.sqlalchemy==1.6 From 088771842d48366b3681bcc66c9c5001042c54e9 Mon Sep 17 00:00:00 2001 From: Francis Charette Migneault Date: Thu, 9 Mar 2023 12:39:56 -0500 Subject: [PATCH 2/2] fix ziggurat_foundations versions relevant to legacy python versions --- requirements.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 6af6a86c7..0f1dadc22 100644 --- a/requirements.txt +++ b/requirements.txt @@ -51,7 +51,7 @@ sqlalchemy>=1.4.44,<2; python_version >= "3.7" # pyup: ignore sqlalchemy-utils<0.36.4; python_version < "3" # pyup: ignore sqlalchemy-utils==0.37.9; python_version >= "3" and python_version <= "3.5" # pyup: ignore sqlalchemy-utils==0.39.0; python_version >= "3.6" # pyup: ignore -threddsclient==0.4.2; python_version < "3" # pyup: ignore +threddsclient==0.4.2; python_version < "3" # pyup: ignore threddsclient>=0.4.2; python_version >= "3" transaction typing; python_version < "3" @@ -60,6 +60,7 @@ typing_extensions; python_version < "3.8" wheel; python_version <= "3.6" wheel>=0.38; python_version >= "3.7" webob -ziggurat_foundations==0.9.1 +ziggurat_foundations==0.8.4; python_version <= "3.6" # pyup: ignore +ziggurat_foundations==0.9.1; python_version >= "3.7" zope.interface>=4.7.2,<5 zope.sqlalchemy==1.6