From 74f351b983ced3fef690ae92208e15d50ab54063 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 23 Aug 2023 10:13:37 +0000 Subject: [PATCH 1/9] fix: scripts/latency-tracking/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2329135 --- scripts/latency-tracking/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/latency-tracking/requirements.txt b/scripts/latency-tracking/requirements.txt index bd3593bc4152a..e236e31516d99 100644 --- a/scripts/latency-tracking/requirements.txt +++ b/scripts/latency-tracking/requirements.txt @@ -1,4 +1,4 @@ packaging==21.0 -Pillow==8.3.2 +Pillow==9.0.0 scipy==1.7.0 uvloop==0.15.2 \ No newline at end of file From 80fd8676a72f33a7b22449df7db5f052d694217b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 23 Aug 2023 10:13:42 +0000 Subject: [PATCH 2/9] fix: scripts/latency-tracking/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2331901 --- scripts/latency-tracking/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/latency-tracking/requirements.txt b/scripts/latency-tracking/requirements.txt index bd3593bc4152a..e236e31516d99 100644 --- a/scripts/latency-tracking/requirements.txt +++ b/scripts/latency-tracking/requirements.txt @@ -1,4 +1,4 @@ packaging==21.0 -Pillow==8.3.2 +Pillow==9.0.0 scipy==1.7.0 uvloop==0.15.2 \ No newline at end of file From 9de79f73dde7971155ca57ac9b40e0c7b696a11f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 23 Aug 2023 10:21:30 +0000 Subject: [PATCH 3/9] fix: scripts/latency-tracking/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2397241 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-3113875 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-3113876 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5756497 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5759266 --- scripts/latency-tracking/requirements.txt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/scripts/latency-tracking/requirements.txt b/scripts/latency-tracking/requirements.txt index e236e31516d99..012168576aada 100644 --- a/scripts/latency-tracking/requirements.txt +++ b/scripts/latency-tracking/requirements.txt @@ -1,4 +1,5 @@ packaging==21.0 -Pillow==9.0.0 -scipy==1.7.0 -uvloop==0.15.2 \ No newline at end of file +Pillow==9.2.0 +scipy==1.10.0rc1 +uvloop==0.15.2 +numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file From 274b290ec1edcd49ed6f5c63829532286d75c324 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 4 Oct 2023 18:51:30 +0000 Subject: [PATCH 4/9] fix: docs/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-2407255 - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858 - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-5840584 - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-5871282 - https://snyk.io/vuln/SNYK-PYTHON-GITPYTHON-5876644 - https://snyk.io/vuln/SNYK-PYTHON-MARKDOWNITPY-3330239 - https://snyk.io/vuln/SNYK-PYTHON-MARKDOWNITPY-3330240 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 --- docs/requirements.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/requirements.txt b/docs/requirements.txt index 18918a05dd295..fb6b670f25e47 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -5,10 +5,13 @@ sphinx-autodoc-typehints==1.12.0 sphinx_markdown_tables==0.0.15 sphinx_copybutton==0.4.0 sphinx-notfound-page==0.7.1 -gitpython==3.1.13 +gitpython==3.1.35 sphinx-sitemap==2.2.0 sphinxext-opengraph furo myst-parser==0.15.1 sphinx-design sphinx-inline-tabs +markdown-it-py>=2.2.0 # not directly required, pinned by Snyk to avoid a vulnerability +numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability From f21f068c5d495879fd7a21834ff7e8ad6f1b5b00 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 21 Mar 2024 16:24:23 +0000 Subject: [PATCH 5/9] fix: Dockerfiles/alpinex.Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE318-EXPAT-6241039 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6152404 - https://snyk.io/vuln/SNYK-ALPINE318-SQLITE-6179217 --- Dockerfiles/alpinex.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfiles/alpinex.Dockerfile b/Dockerfiles/alpinex.Dockerfile index fc75f3a8267be..fcdbeb3729096 100644 --- a/Dockerfiles/alpinex.Dockerfile +++ b/Dockerfiles/alpinex.Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.7-alpine +FROM python:3.9.19-alpine ARG VCS_REF ARG BUILD_DATE From 34625ae5084d2e87cfcf48d57e8cf3bbebf95d85 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 17 Nov 2024 04:43:29 +0000 Subject: [PATCH 6/9] fix: Dockerfiles/dind.Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE319-EXPAT-7908400 - https://snyk.io/vuln/SNYK-ALPINE319-EXPAT-7908409 - https://snyk.io/vuln/SNYK-ALPINE319-GIT-6854155 - https://snyk.io/vuln/SNYK-ALPINE319-CURL-7567383 - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSH-7416449 --- Dockerfiles/dind.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfiles/dind.Dockerfile b/Dockerfiles/dind.Dockerfile index b46f2bd9571e2..227907dd72b80 100644 --- a/Dockerfiles/dind.Dockerfile +++ b/Dockerfiles/dind.Dockerfile @@ -1,4 +1,4 @@ -FROM docker:git +FROM docker:25.0.5-git RUN apk update && apk upgrade && apk --no-cache add curl bash make From 1a64f63900eb6c28204f8ea462d33994394f9fee Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 21 Nov 2024 23:59:21 +0000 Subject: [PATCH 7/9] fix: Dockerfiles/alpinex.Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 --- Dockerfiles/alpinex.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfiles/alpinex.Dockerfile b/Dockerfiles/alpinex.Dockerfile index fcdbeb3729096..05d6d83c80740 100644 --- a/Dockerfiles/alpinex.Dockerfile +++ b/Dockerfiles/alpinex.Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.9.19-alpine +FROM python:3.14.0a2-alpine ARG VCS_REF ARG BUILD_DATE From 39fad1d85b0e3e56fe61e74232722f47836b208d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 10 Feb 2025 05:57:47 +0000 Subject: [PATCH 8/9] fix: docs/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 --- docs/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/requirements.txt b/docs/requirements.txt index fb6b670f25e47..757d09739e702 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -15,3 +15,4 @@ sphinx-inline-tabs markdown-it-py>=2.2.0 # not directly required, pinned by Snyk to avoid a vulnerability numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability From b615f672b3cad99bcf5b3c60da86e776578e3fbd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 20 Aug 2025 12:34:38 +0000 Subject: [PATCH 9/9] fix: Dockerfiles/alpinex.Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE321-SQLITE-11191065 - https://snyk.io/vuln/SNYK-ALPINE321-SQLITE-9712340 - https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634 - https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8690014 --- Dockerfiles/alpinex.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfiles/alpinex.Dockerfile b/Dockerfiles/alpinex.Dockerfile index 05d6d83c80740..99bc0ee663acd 100644 --- a/Dockerfiles/alpinex.Dockerfile +++ b/Dockerfiles/alpinex.Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.14.0a2-alpine +FROM python:3.14.0rc2-alpine ARG VCS_REF ARG BUILD_DATE