Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Snyk auto fix #10774

Merged
merged 2 commits into from
Oct 23, 2023
Merged

Snyk auto fix #10774

merged 2 commits into from
Oct 23, 2023

Conversation

c2c-bot-gis-ci
Copy link
Collaborator

⠋ Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal
► Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal

  • Looking for supported Python items

✔ Looking for supported Python items

  • Looking for supported Python items

✔ Looking for supported Python items
⠋ Processing 4 pyproject.toml items⠋ Processing 7 requirements.txt items✔ Processed 7 requirements.txt items

  • Checking poetry version
    ⚠️ Could not detect poetry version, proceeding anyway. Some operations may fail.
  • Fixing pyproject.toml 1/2
  • Fixing pyproject.toml 2/2
    ✔ Processed 4 pyproject.toml items
    ✔ Done

Successful fixes:

pyproject.toml
✔ Upgraded urllib3 from 1.26.17 to 1.26.18

doc/pyproject.toml
✔ Upgraded urllib3 from 1.26.17 to 1.26.18

Unresolved items:

docker/config/pyproject.toml
✖ There is no actionable remediation to apply

docker/qgisserver/pyproject.toml
✖ There is no actionable remediation to apply

geoportal/package-lock.json
✖ npm is not supported.

Summary:

3 items were not fixed
2 items were successfully fixed
2 items were not vulnerable

22 issues: 1 High | 16 Medium | 5 Low
2 issues are fixable
2 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=snyk . If the issue persists contact support@snyk.io

@c2c-bot-gis-ci c2c-bot-gis-ci added the dependencies Update the dependencies label Oct 19, 2023
@c2c-bot-gis-ci c2c-bot-gis-ci force-pushed the snyk-fix/2.8 branch 3 times, most recently from 064b93e to a5d55b9 Compare October 22, 2023 02:39
@sbrunner sbrunner merged commit 96e1dc5 into 2.8 Oct 23, 2023
@sbrunner sbrunner deleted the snyk-fix/2.8 branch October 23, 2023 05:49
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
dependencies Update the dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants