Merge pull request #247 from boschresearch/fix_dependent_alert

fix security issues found by dependabot
eclipse · Feb 15, 2022 · 1d0a94f · 1d0a94f
2 parents bff934e + 35ff813
commit 1d0a94f
Show file tree

Hide file tree

Showing 7 changed files with 229 additions and 336 deletions.
diff --git a/kuksa_apps/node-red/docker-compose.yml b/kuksa_apps/node-red/docker-compose.yml
@@ -16,7 +16,7 @@ services:
     ports:
       - 1883:1883
   kuksa-val:
-    image: ${ARCH}/kuksa-val:0.1.8
+    image: ${ARCH}/kuksa-val:0.2.0
     restart: unless-stopped 
     ports:
       - 8090:8090

diff --git a/kuksa_apps/node-red/mqtt/flows.json b/kuksa_apps/node-red/mqtt/flows.json
diff --git a/kuksa_apps/node-red/mqtt/package-lock.json b/kuksa_apps/node-red/mqtt/package-lock.json
diff --git a/kuksa_apps/node-red/mqtt/package.json b/kuksa_apps/node-red/mqtt/package.json
@@ -4,7 +4,7 @@
     "version": "0.0.1",
     "private": true,
     "dependencies": {
-        "node-red-contrib-web-worldmap": "~2.12.1",
-        "node-red-dashboard": "~2.28.2"
+        "node-red-contrib-web-worldmap": "~2.27.1",
+        "node-red-dashboard": "~3.1.5"
     }
 }
diff --git a/kuksa_apps/s3/requirements.txt b/kuksa_apps/s3/requirements.txt
@@ -1,4 +1,3 @@
-importlib_metadata >= 3.6
-websockets~=8.1
+kuksa-viss-client
 boto3~=1.16.5
 pyarrow~=3.0.0
diff --git a/kuksa_viss_client/requirements.txt b/kuksa_viss_client/requirements.txt
@@ -1,4 +1,4 @@
-websockets~=8.1
+websockets~=10.1
 cmd2~=1.4
 pygments~=2.5
 importlib_metadata >= 3.6

diff --git a/setup.cfg b/setup.cfg
@@ -23,7 +23,7 @@ license_file = LICENSE
 [options]
 python_requires = >=3.6
 install_requires=
-    websockets~=8.1
+    websockets~=10.1
     cmd2~=1.4
     pygments~=2.5
     importlib_metadata >= 3.6