ignore jinja CVE

closes #1478 Signed-off-by: Alexandre Lavigne <[email protected]> (cherry picked from commit 16a62ef)
burnash · Oct 3, 2024 · 8a03416 · 8a03416
1 parent 6dd09f5
commit 8a03416
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 5 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -30,6 +30,6 @@ jobs:
       - run: tox -e lint
       - run: tox -e py
       - run: shopt -s globstar && pyupgrade --py3-only **/*.py # --py36-plus
-      - run: safety check -i 42559 -i 62044 -i 67599 # pip version issue, we don't care about it, we don't ship it
+      - run: safety check -i 42559 -i 62044 -i 67599 -i 70612 # pip version issue, we don't care about it, we don't ship it
       - run: tox -e build
       - run: tox -e doc
diff --git a/gspread/auth.py b/gspread/auth.py
@@ -92,12 +92,12 @@ class FlowCallable(Protocol):
 
     def __call__(
         self, client_config: Mapping[str, Any], scopes: Iterable[str], port: int = 0
-    ) -> Credentials: ...
+    ) -> OAuthCredentials: ...
 
 
 def local_server_flow(
     client_config: Mapping[str, Any], scopes: Iterable[str], port: int = 0
-) -> Credentials:
+) -> OAuthCredentials:
     """Run an OAuth flow using a local server strategy.
 
     Creates an OAuth flow and runs `google_auth_oauthlib.flow.InstalledAppFlow.run_local_server <https://google-auth-oauthlib.readthedocs.io/en/latest/reference/google_auth_oauthlib.flow.html#google_auth_oauthlib.flow.InstalledAppFlow.run_local_server>`_.
@@ -121,7 +121,7 @@ def load_credentials(
 
 
 def store_credentials(
-    creds: Credentials,
+    creds: OAuthCredentials,
     filename: Path = DEFAULT_AUTHORIZED_USER_FILENAME,
     strip: str = "token",
 ) -> None:
@@ -282,7 +282,6 @@ def oauth_from_dict(
     :rtype: (:class:`gspread.client.Client`, str)
     """
 
-    creds: Credentials = None
     if authorized_user_info is not None:
         creds = OAuthCredentials.from_authorized_user_info(authorized_user_info, scopes)