From ea8cb6ee51eb7e75505d0d9b44ee3f90295d60c9 Mon Sep 17 00:00:00 2001 From: Tobias Persson <tobiaspn@axis.com> Date: Fri, 8 Mar 2024 13:25:08 +0100 Subject: [PATCH] Dependabot fixes A few security problems were detected by dependabot with the cryptography package. Manually updating versions as depenedabot does not work in this repository. --- requirements.txt | 2 +- setup.cfg | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 3b0edae..b9b5fd0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,7 +9,7 @@ # ============================================================================= eventlet~=0.33 celery~=5.3 -cryptography~=41.0 +cryptography>=42.0.4,<43.0.0 gevent~=23.7 gunicorn~=19.9 falcon~=3.1 diff --git a/setup.cfg b/setup.cfg index 765984d..786768a 100644 --- a/setup.cfg +++ b/setup.cfg @@ -28,7 +28,7 @@ setup_requires = pyscaffold>=3.2a0,<3.3a0 install_requires = eventlet~=0.33 celery~=5.3 - cryptography~=41.0 + cryptography>=42.0.4,<43.0.0 gevent~=23.7 gunicorn~=19.9 falcon~=3.1