Skip to content

Commit

Permalink
chore: update requirements
Browse files Browse the repository at this point in the history
ci: ignore tornado vulnerability

There is currently no fix [#2981](tornadoweb/tornado#2981).

ci: remove safety pre-commit

I don't have time right now to check how to configure it to ignore some
alerts
  • Loading branch information
lyz-code committed Feb 1, 2021
1 parent 6fa1fb2 commit 4d4b65b
Show file tree
Hide file tree
Showing 4 changed files with 20 additions and 23 deletions.
4 changes: 0 additions & 4 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,10 +20,6 @@ repos:
id: mypy
args: [--no-warn-unused-ignores, --ignore-missing-imports]
files: src
- repo: https://github.com/Lucas-C/pre-commit-hooks-safety
rev: v1.1.3
hooks:
- id: python-safety-dependencies-check
- repo: https://github.com/life4/flakehell/
rev: master
hooks:
Expand Down
3 changes: 2 additions & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -196,7 +196,8 @@ security:
@echo "- Testing security -"
@echo "--------------------"

safety check
# There is currently no fix [#2981](https://github.com/tornadoweb/tornado/issues/2981)
safety check -i 39462
@echo ""
bandit -r src

Expand Down
10 changes: 5 additions & 5 deletions docs/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ idna==2.10
# via requests
importlib-metadata==3.4.0
# via markdown
jinja2==2.11.2
jinja2==2.11.3
# via
# mkdocs
# mkdocstrings
Expand Down Expand Up @@ -61,7 +61,7 @@ mkdocs-htmlproofer-plugin==0.0.3
# via -r docs/requirements.in
mkdocs-material-extensions==1.0.1
# via mkdocs-material
mkdocs-material==6.2.5
mkdocs-material==6.2.7
# via
# -r docs/requirements.in
# mkdocs-material-extensions
Expand All @@ -82,13 +82,13 @@ nltk==3.5
# via lunr
pygments==2.7.4
# via mkdocs-material
pymdown-extensions==8.1
pymdown-extensions==8.1.1
# via
# mkdocs-material
# mkdocstrings
pytkdocs==0.10.1
# via mkdocstrings
pytz==2020.5
pytz==2021.1
# via babel
pyyaml==5.4.1
# via mkdocs
Expand All @@ -114,7 +114,7 @@ typing-extensions==3.7.4.3
# via
# importlib-metadata
# pytkdocs
urllib3==1.26.2
urllib3==1.26.3
# via requests
zipp==3.4.0
# via importlib-metadata
26 changes: 13 additions & 13 deletions requirements-dev.txt
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@ click==7.1.2
# yamlfix
colorama==0.4.4
# via flakehell
coverage==5.3.1
coverage==5.4
# via pytest-cov
distlib==0.3.1
# via virtualenv
Expand Down Expand Up @@ -105,7 +105,7 @@ flake8-pytest-style==1.3.0
# via -r requirements-dev.in
flake8-pytest==1.3
# via -r requirements-dev.in
flake8-simplify==0.12.0
flake8-simplify==0.13.0
# via -r requirements-dev.in
flake8-typing-imports==1.10.1
# via -r requirements-dev.in
Expand Down Expand Up @@ -175,7 +175,7 @@ isort==5.7.0
# via
# -r requirements-dev.in
# pylint
jinja2==2.11.2
jinja2==2.11.3
# via
# -r docs/requirements.txt
# mkdocs
Expand Down Expand Up @@ -235,7 +235,7 @@ mkdocs-material-extensions==1.0.1
# via
# -r docs/requirements.txt
# mkdocs-material
mkdocs-material==6.2.5
mkdocs-material==6.2.7
# via
# -r docs/requirements.in
# -r docs/requirements.txt
Expand Down Expand Up @@ -270,7 +270,7 @@ nltk==3.5
# lunr
nodeenv==1.5.0
# via pre-commit
packaging==20.8
packaging==20.9
# via
# dparse
# pytest
Expand All @@ -287,7 +287,7 @@ pip-tools==5.5.0
# via -r requirements-dev.in
pluggy==0.13.1
# via pytest
pre-commit==2.9.3
pre-commit==2.10.0
# via -r requirements-dev.in
py==1.10.0
# via pytest
Expand All @@ -309,7 +309,7 @@ pygments==2.7.4
# mkdocs-material
pylint==2.6.0
# via -r requirements-dev.in
pymdown-extensions==8.1
pymdown-extensions==8.1.1
# via
# -r docs/requirements.txt
# mkdocs-material
Expand All @@ -322,7 +322,7 @@ pytest-cov==2.11.1
# via -r requirements-dev.in
pytest-pythonpath==0.7.3
# via -r requirements-dev.in
pytest==6.2.1
pytest==6.2.2
# via
# -r requirements-dev.in
# pytest-cov
Expand All @@ -331,7 +331,7 @@ pytkdocs==0.10.1
# via
# -r docs/requirements.txt
# mkdocstrings
pytz==2020.5
pytz==2021.1
# via
# -r docs/requirements.txt
# babel
Expand Down Expand Up @@ -411,26 +411,26 @@ typing-extensions==3.7.4.3
# importlib-metadata
# mypy
# pytkdocs
urllib3==1.26.2
urllib3==1.26.3
# via
# -r docs/requirements.txt
# flakehell
# requests
virtualenv==20.4.0
virtualenv==20.4.2
# via pre-commit
wrapt==1.12.1
# via astroid
yamlfix==0.3.0
# via -r requirements-dev.in
yamllint==1.25.0
yamllint==1.26.0
# via -r requirements-dev.in
zipp==3.4.0
# via
# -r docs/requirements.txt
# importlib-metadata

# The following packages are considered to be unsafe in a requirements file:
pip==21.0
pip==21.0.1
# via pip-tools
setuptools==52.0.0
# via
Expand Down

0 comments on commit 4d4b65b

Please sign in to comment.