Merge pull request #137 from Venafi/dependency-update

fix(dependency-update): Updates dependencies to latest version

Author: rvelaVenafi

docker-entrypoint.sh

@@ -8,6 +8,8 @@ bandit -r vcert/
 
 # ID 40291 is pip, ignore so we can still test python 2.7
 #Ignoring false-positive issue with pytest. ref: https://github.com/pytest-dev/py/issues/287
-safety check -i 40291 -i 51457
+#Ignoring cryptography issue 59473 The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
+# If we upgrade to cryptography 41.0.2 or higher we get `pyo3 modules may only be initialized once per interpreter process` and tests cannot run
+safety check -i 40291 -i 51457 -i 59473
 
 pytest -v --junit-xml=junit.xml --junit-prefix=`python -V | tr ' ' '_'` --cov=vcert --cov=vcert.parser --cov=vcert.policy --cov-report term --cov-report xml

requirements-build.txt

@@ -1,4 +1,4 @@
-pytest==7.3.1
+pytest==7.4.3
 pytest-cov==4.1.0
 safety==2.3.5
 bandit==1.7.5

requirements.txt

@@ -2,5 +2,5 @@ requests==2.31.0
 python-dateutil==2.8.2
 cryptography==40.0.2
 six==1.16.0
-ruamel.yaml==0.17.31
+ruamel.yaml==0.18.5
 pynacl==1.5.0