From 0cb0ec4a5f0adb99470d2bae3a503f144f778231 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 20 Nov 2023 19:31:26 +0000 Subject: [PATCH 1/2] fix: requirements/requirements-binaries.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYINSTALLER-5880434 --- requirements/requirements-binaries.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/requirements-binaries.txt b/requirements/requirements-binaries.txt index e9f7fa17..34fe9046 100644 --- a/requirements/requirements-binaries.txt +++ b/requirements/requirements-binaries.txt @@ -1,6 +1,6 @@ altgraph==0.17.3 polib==1.2.0 -pyinstaller==5.7.0 +pyinstaller==5.13.1 pyinstaller-hooks-contrib==2022.15 # The following packages are considered to be unsafe in a requirements file: From 1e54ca43ed42633d168f481b9434300504eedea8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 21 Nov 2023 15:55:48 +0000 Subject: [PATCH 2/2] fix: docs/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-NCURSES-5421197 --- docs/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/Dockerfile b/docs/Dockerfile index e7752a91..7f068dfe 100644 --- a/docs/Dockerfile +++ b/docs/Dockerfile @@ -1,4 +1,4 @@ -FROM ruby:3.1.3-slim-bullseye as jekyll +FROM ruby:slim-bullseye as jekyll # https://github.com/BretFisher/jekyll-serve/blob/main/Dockerfile RUN apt-get update && apt-get install -y --no-install-recommends \ build-essential \