canonical / canonical/sphinx-stack
Address recent package vulnerabilities
Open
- Dominant language
- No language data
- Stars
- 37
- Forks
- 77
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 3
Description
## Situation
OSV scanner [reported](https://github.com/canonical/craft-store/actions/runs/28454282781/job/84324792700?pr=400) that these unpinned packages are vulnerable:
- filelock
- gitpython
- h11
- idna
## Request
Add to requirements:
```
filelock>=3.13.1
gitpython>=3.1.41
h11>=0.14.0
idna>=3.10
```
Contributor guide
Assessment
This issue has not been assessed yet.