Addressed safety issues up to 2023-11-05

Signed-off-by: Andreas Maier <[email protected]>
zhmcclient · Nov 5, 2023 · fe8b45c · fe8b45c
1 parent 7b8d5ed
commit fe8b45c
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/.safety-policy.yml b/.safety-policy.yml
@@ -72,6 +72,8 @@ security:
             reason: Fixed GitPython version 3.1.33 requires Python>=3.7 and is used there
         60841:
             reason: Fixed GitPython version 3.1.35 requires Python>=3.7 and is used there
+        61601:
+            reason: Fixed urllib3 version 1.26.17 requires Python>=3.6 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/docs/changes.rst b/docs/changes.rst
@@ -31,6 +31,8 @@ Released: not yet
 
 **Bug fixes:**
 
+* Addressed safety issues up to 2023-11-05.
+
 **Enhancements:**
 
 **Cleanup:**

diff --git a/minimum-constraints.txt b/minimum-constraints.txt
@@ -133,7 +133,8 @@ jsonschema==3.0.1
 yamlloader==0.5.5
 
 # urllib3 is used to disable warnings
-urllib3==1.26.5
+urllib3==1.26.9; python_version == '3.5'
+urllib3==1.26.17; python_version >= '3.6'
 
 pyrsistent==0.15.1
 

diff --git a/requirements.txt b/requirements.txt
@@ -54,7 +54,9 @@ jsonschema>=3.0.1
 yamlloader>=0.5.5
 
 # urllib3 is used to disable warnings
-urllib3>=1.26.5  # MIT
+# urllib3 1.26.10 removed support for py35
+urllib3>=1.26.9; python_version == '3.5'
+urllib3>=1.26.17; python_version >= '3.6'
 
 
 # Indirect dependencies (commented out, only listed to document their license):