Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update requirements #2983

Merged
merged 2 commits into from
Dec 4, 2024
Merged

Conversation

austin-hall-skylight
Copy link
Collaborator

PULL REQUEST

Summary

We have discovered some high level vulnerabilities in our Snyk reports. We need to address the vulnerabilities that effect the app in production (so ignoring things like dev-requirements, or containers that we're not using such as record-linkage).

Related Issue

Fixes #2964

Acceptance Criteria

  • ingestion/requirements.txt
    • Pin setuptools to version 70.0.0
    • Pin anyio to version 4.4.0
  • message-parser/requirements.txt
    • Pin anyio to version 4.4.0
  • orchestration/requirements.txt
    • Pin anyio to version 4.4.0
  • trigger-code-reference/requirements.txt
    • Pin anyio to version 4.4.0
  • fhir-converter-requirements.txt
    • Pin anyio to version 4.4.0

Additional Information

Anything else the review team should know?

Checklist

  • If this code affects the other scrum team, have they been notified? (In Slack, as reviewers, etc.)

Copy link
Collaborator

@gordonfarrell gordonfarrell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@austin-hall-skylight austin-hall-skylight added this pull request to the merge queue Dec 4, 2024
Merged via the queue into main with commit 63949d3 Dec 4, 2024
39 checks passed
@austin-hall-skylight austin-hall-skylight deleted the austin/#2964-update-dependencies branch December 4, 2024 16:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Fix high severity vulnerabilities from Snyk scans
2 participants