[Snyk] Security upgrade mistune from 0.8.4 to 2.0.3 (#1137)

* fix: doc-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-2940625 * update doc-requirements.txt Signed-off-by: Kevin Su <[email protected]> Signed-off-by: Kevin Su <[email protected]> Co-authored-by: snyk-bot <[email protected]> Co-authored-by: Kevin Su <[email protected]>
flyteorg · Aug 30, 2022 · 162b084 · 162b084
1 parent 53367e8
commit 162b084
Showing 1 changed file with 31 additions and 45 deletions.
diff --git a/doc-requirements.txt b/doc-requirements.txt
@@ -1,8 +1,8 @@
 #
-# This file is autogenerated by pip-compile with python 3.7
+# This file is autogenerated by pip-compile with python 3.9
 # To update, run:
 #
-#    make doc-requirements.txt
+#    pip-compile doc-requirements.in
 #
 -e file:.#egg=flytekit
     # via -r doc-requirements.in
@@ -26,8 +26,10 @@ argon2-cffi-bindings==21.2.0
     # via argon2-cffi
 arrow==1.2.2
     # via jinja2-time
-astroid==2.12.3
+astroid==2.12.5
     # via sphinx-autoapi
+asttokens==2.0.8
+    # via stack-data
 astunparse==1.6.3
     # via tensorflow
 attrs==22.1.0
@@ -38,10 +40,6 @@ babel==2.10.3
     # via sphinx
 backcall==0.2.0
     # via ipython
-backports-zoneinfo==0.2.1
-    # via
-    #   pytz-deprecation-shim
-    #   tzlocal
 beautifulsoup4==4.11.1
     # via
     #   furo
@@ -52,7 +50,7 @@ binaryornot==0.4.4
     # via cookiecutter
 bleach==5.0.1
     # via nbconvert
-botocore==1.27.59
+botocore==1.27.62
     # via -r doc-requirements.in
 cachetools==5.2.0
     # via google-auth
@@ -126,6 +124,8 @@ entrypoints==0.4
     #   altair
     #   jupyter-client
     #   papermill
+executing==1.0.0
+    # via stack-data
 fastjsonschema==2.16.1
     # via nbformat
 flatbuffers==1.12
@@ -177,9 +177,9 @@ googleapis-common-protos==1.56.4
     #   flyteidl
     #   google-api-core
     #   grpcio-status
-great-expectations==0.15.19
+great-expectations==0.15.20
     # via -r doc-requirements.in
-greenlet==1.1.2
+greenlet==1.1.3
     # via sqlalchemy
 grpcio==1.47.0
     # via
@@ -206,25 +206,20 @@ imagesize==1.4.1
     # via sphinx
 importlib-metadata==4.12.0
     # via
-    #   click
     #   flytekit
     #   great-expectations
-    #   jsonschema
     #   keyring
     #   markdown
     #   nbconvert
     #   sphinx
-    #   sqlalchemy
-importlib-resources==5.9.0
-    # via jsonschema
-ipykernel==6.15.1
+ipykernel==6.15.2
     # via
     #   ipywidgets
     #   jupyter
     #   jupyter-console
     #   notebook
     #   qtconsole
-ipython==7.34.0
+ipython==8.4.0
     # via
     #   great-expectations
     #   ipykernel
@@ -272,7 +267,7 @@ jsonschema==4.14.0
     #   nbformat
 jupyter==1.0.0
     # via -r doc-requirements.in
-jupyter-client==7.3.4
+jupyter-client==7.3.5
     # via
     #   ipykernel
     #   jupyter-console
@@ -347,7 +342,7 @@ mistune==2.0.4
     # via
     #   great-expectations
     #   nbconvert
-modin==0.12.1
+modin==0.15.2
     # via -r doc-requirements.in
 multimethod==1.8
     # via
@@ -378,16 +373,15 @@ nest-asyncio==1.5.5
     #   jupyter-client
     #   nbclient
     #   notebook
-networkx==2.6.3
+networkx==2.8.6
     # via visions
 notebook==6.4.12
     # via
     #   great-expectations
     #   jupyter
-numpy==1.21.6
+numpy==1.23.2
     # via
     #   altair
-    #   flytekit
     #   great-expectations
     #   h5py
     #   imagehash
@@ -419,7 +413,7 @@ onnx==1.12.0
     #   onnxconverter-common
     #   skl2onnx
     #   tf2onnx
-onnxconverter-common==1.12.1
+onnxconverter-common==1.12.2
     # via skl2onnx
 opt-einsum==3.3.0
     # via tensorflow
@@ -436,7 +430,7 @@ packaging==21.3
     #   qtpy
     #   sphinx
     #   tensorflow
-pandas==1.3.5
+pandas==1.4.3
     # via
     #   altair
     #   dolt-integrations
@@ -450,7 +444,7 @@ pandas==1.3.5
     #   visions
 pandas-profiling==3.2.0
     # via -r doc-requirements.in
-pandera==0.9.0
+pandera==0.12.0
     # via -r doc-requirements.in
 pandocfilters==1.5.0
     # via nbconvert
@@ -469,8 +463,6 @@ pillow==9.2.0
     #   imagehash
     #   matplotlib
     #   visions
-pkgutil-resolve-name==1.3.10
-    # via jsonschema
 plotly==5.10.0
     # via -r doc-requirements.in
 prometheus-client==0.14.1
@@ -502,11 +494,15 @@ protobuf==3.19.4
 protoc-gen-swagger==0.1.0
     # via flyteidl
 psutil==5.9.1
-    # via ipykernel
+    # via
+    #   ipykernel
+    #   modin
 ptyprocess==0.7.0
     # via
     #   pexpect
     #   terminado
+pure-eval==0.2.2
+    # via stack-data
 py==1.11.0
     # via retry
 py4j==0.10.9.5
@@ -592,7 +588,7 @@ pyzmq==23.2.1
     #   jupyter-client
     #   notebook
     #   qtconsole
-qtconsole==5.3.1
+qtconsole==5.3.2
     # via jupyter
 qtpy==2.2.0
     # via qtconsole
@@ -628,9 +624,9 @@ ruamel-yaml==0.17.17
     # via great-expectations
 ruamel-yaml-clib==0.2.6
     # via ruamel-yaml
-scikit-learn==1.0.2
+scikit-learn==1.1.2
     # via skl2onnx
-scipy==1.7.3
+scipy==1.9.1
     # via
     #   great-expectations
     #   imagehash
@@ -646,10 +642,9 @@ seaborn==0.11.2
     #   pandas-profiling
 send2trash==1.8.0
     # via notebook
-singledispatchmethod==1.0
-    # via flytekit
 six==1.16.0
     # via
+    #   asttokens
     #   astunparse
     #   bleach
     #   google-auth
@@ -718,6 +713,8 @@ sphinxcontrib-yt==0.2.2
     # via -r doc-requirements.in
 sqlalchemy==1.4.40
     # via -r doc-requirements.in
+stack-data==0.5.0
+    # via ipython
 statsd==3.3.0
     # via flytekit
 tangled-up-in-unicode==0.2.0
@@ -784,22 +781,13 @@ traitlets==5.3.0
     #   nbformat
     #   notebook
     #   qtconsole
-typed-ast==1.5.4
-    # via astroid
 typing-extensions==4.3.0
     # via
-    #   argon2-cffi
-    #   arrow
     #   astroid
     #   flytekit
     #   great-expectations
-    #   importlib-metadata
-    #   jsonschema
-    #   kiwisolver
     #   onnx
-    #   pandera
     #   pydantic
-    #   responses
     #   tensorflow
     #   torch
     #   typing-inspect
@@ -852,9 +840,7 @@ wrapt==1.14.1
     #   pandera
     #   tensorflow
 zipp==3.8.1
-    # via
-    #   importlib-metadata
-    #   importlib-resources
+    # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools