Skip to content

Commit 877b0d7

Browse files
authored
Security/759 update dependencies on 6.1.1 (#760)
* Update dependencies on 6.1.1 * Increase actions/deploy-pages to v5
1 parent 0fee8f8 commit 877b0d7

4 files changed

Lines changed: 87 additions & 73 deletions

File tree

.github/workflows/gh-pages.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

doc/changes/unreleased.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,20 @@
22

33
## Summary
44

5+
This release fixes vulnerabilities by updating transitive dependencies in the `poetry.lock` file.
6+
7+
| Dependency | Version | ID | Fix Versions | Updated to |
8+
|--------------|---------|----------------|--------------|------------|
9+
| cryptography | 46.0.5 | CVE-2026-34073 | 46.0.6 | 46.0.6 |
10+
| pygments | 2.19.2 | CVE-2026-4539 | 2.20.0 | 2.20.0 |
11+
| requests | 2.32.5 | CVE-2026-25645 | 2.33.0 | 2.33.1 |
12+
13+
To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.
14+
515
## Features
616

717
* #740: Added nox session `release:update`
18+
19+
## Security Issues
20+
21+
* #759: Fixed vulnerabilities by re-locking transitive dependencies & updated `actions/deploy-pages` from v4 to v5

exasol/toolbox/templates/github/workflows/gh-pages.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,4 +50,4 @@ jobs:
5050
steps:
5151
- name: Deploy to GitHub Pages
5252
id: deploy-to-github-pages
53-
uses: actions/deploy-pages@v4
53+
uses: actions/deploy-pages@v5

0 commit comments

Comments
 (0)