oncall-engine/tools/migrators/requirements.in at 4a39518a565956208517c274435f1b8d92e7445a - centralcloud/oncall-engine - Hugo Forgejo

centralcloud/oncall-engine

Joey Orlando 4a39518a56

address outstanding CVEs + remove plop from grafana-plugin/ (#4871 )

# Which issue(s) this PR closes

Closes the following dependabot alerts/CVEs:

- [x] https://github.com/grafana/oncall/security/dependabot/117 -
CVE-2022-42969
- [x] https://github.com/grafana/oncall/security/dependabot/106 and
https://github.com/grafana/oncall/security/dependabot/105 -
CVE-2024-3651
- [x] https://github.com/grafana/oncall/security/dependabot/51 -
CVE-2022-46175
- [x] https://github.com/grafana/oncall/security/dependabot/124 -
CVE-2024-4068
- [ ] https://github.com/grafana/oncall/security/dependabot/78 -
CVE-2023-44270
- [ ] https://github.com/grafana/oncall/security/dependabot/132 and
https://github.com/grafana/oncall/security/dependabot/131 -
CVE-2024-39689

## Checklist

- [x] Unit, integration, and e2e (if applicable) tests updated
- [ ] Documentation added (or `pr:no public docs` PR label added if not
required)
- [ ] Added the relevant release notes label (see labels prefixed w/
`release:`). These labels dictate how your PR will
    show up in the autogenerated release notes.

2024-08-20 10:29:01 -04:00

4 lines

64 B

Text

Raw Blame History

 requests==2.32.3
 pdpyras==4.5.0
 pytest==8.2.2
 pytest-env==0.6.2