googleapis / googleapis/google-cloud-python

Add presubmit for pip-audit to bump minimum supported versions of dependencies

Abierto
#15,816 2 comentarios 0 reacciones 1 asignado Reclamado por @holtskinner Ver en GitHub
Lenguaje dominante
Python
Estrellas
5.4k
Forks
1.8k
Merge medio
3 d 4 h
PR fusionados (30 d)
122

Descripción

There is a vulnerability in pyarrow<17.0: https://osv.dev/vulnerability/PYSEC-2024-161

I didn't go through the security policy because it seems only R is affected, but nevertheless it appears in `pip-audit` reports for any repository that uses `python-documentai-toolbox`, so it's an annoyance.

#### Environment details

- Python version: 3.11
- pip version: 24.0
- `google-cloud-documentai-toolbox` version: 0.14.2a0
- `pip-audit` version: 2.8

#### Steps to reproduce

1. install `pip-audit` in a repo with `google-cloud-documentai-toolbox` as a dependency
2. run `pip-audit`

#### Code example

```bash
$ pip-audit
Found 1 known vulnerability in 1 package
Name Version ID Fix Versions
------- ------- -------------- ------------
pyarrow 15.0.2 PYSEC-2024-161 17.0.0
```

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.