From edbd900927719407bae7eb950f1287286a15fe4d Mon Sep 17 00:00:00 2001
From: Snyk bot <snyk-bot@snyk.io>
Date: Wed, 6 Jul 2022 21:59:47 +0300
Subject: [PATCH] [Snyk] Security upgrade mistune from 0.8.4 to 2.0.3 (#1091)

* fix: plugins/flytekit-papermill/requirements.txt to reduce vulnerabilities


The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-2940625

* bump nbconvert to 7.0.0rc2

Signed-off-by: Yee Hing Tong <wild-endeavor@users.noreply.github.com>

Co-authored-by: Yee Hing Tong <wild-endeavor@users.noreply.github.com>
---
 plugins/flytekit-papermill/requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/flytekit-papermill/requirements.txt b/plugins/flytekit-papermill/requirements.txt
index 6157e797dd..10c137989e 100644
--- a/plugins/flytekit-papermill/requirements.txt
+++ b/plugins/flytekit-papermill/requirements.txt
@@ -143,7 +143,7 @@ matplotlib-inline==0.1.3
     # via
     #   ipykernel
     #   ipython
-mistune==0.8.4
+mistune==2.0.3
     # via nbconvert
 mypy-extensions==0.4.3
     # via typing-inspect
@@ -153,7 +153,7 @@ nbclient==0.6.6
     # via
     #   nbconvert
     #   papermill
-nbconvert==6.5.0
+nbconvert==7.0.0rc2
     # via flytekitplugins-papermill
 nbformat==5.4.0
     # via