From d78c1dcd23d0b35f571f051234289b20a487b37c Mon Sep 17 00:00:00 2001 From: John DiMatteo Date: Wed, 11 Jan 2023 08:56:08 -0700 Subject: [PATCH] Allow networkx<3.0 to allow security fixes networkx before 2.6 is flagged for security vulnerabilities as described at https://security.snyk.io/vuln/SNYK-PYTHON-NETWORKX-1062709 Note that networkx<3.0 was allowed with https://github.com/etsy/boundary-layer/pull/107 , however was reverted with https://github.com/etsy/boundary-layer/pull/108 , and no context was provided why it was reverted, but hopefully this change is fine now given the passage of time. --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index 7e1551d..f21a4a8 100644 --- a/setup.py +++ b/setup.py @@ -46,7 +46,7 @@ 'jinja2>=2.8.1', 'pyyaml>=4.2b1', 'marshmallow>=2.13.6,<3.0', - 'networkx>=2.4,<2.5', + 'networkx>=2.4,<3.0', 'xmltodict>=0.11.0,<1.0', 'six>=1.11.0,<2.0', 'markupsafe==2.0.1',