From c45bd62c31a7b8a97840a1b0c7fdcb20e07d8d8f Mon Sep 17 00:00:00 2001 From: Mikayla Thompson Date: Tue, 23 Apr 2024 15:28:50 -0600 Subject: [PATCH 1/2] add trailing newline Signed-off-by: Mikayla Thompson --- FetchMigration/python/dev-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/FetchMigration/python/dev-requirements.txt b/FetchMigration/python/dev-requirements.txt index 97396f4a7..0fd091370 100644 --- a/FetchMigration/python/dev-requirements.txt +++ b/FetchMigration/python/dev-requirements.txt @@ -2,4 +2,4 @@ coverage>=7.3.2 pur>=7.3.1 moto>=4.2.7 # Transitive dependency from moto, explicit version needed to mitigate CVE-2023-46136 -werkzeug>=3.0.1 \ No newline at end of file +werkzeug>=3.0.1 From b37733ab4e4b004d028fe195488310c88fca4524 Mon Sep 17 00:00:00 2001 From: Mikayla Thompson Date: Tue, 23 Apr 2024 15:49:46 -0600 Subject: [PATCH 2/2] move werkzeug to the top Signed-off-by: Mikayla Thompson --- FetchMigration/python/dev-requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/FetchMigration/python/dev-requirements.txt b/FetchMigration/python/dev-requirements.txt index 0fd091370..6e901fbc2 100644 --- a/FetchMigration/python/dev-requirements.txt +++ b/FetchMigration/python/dev-requirements.txt @@ -1,5 +1,5 @@ +# Transitive dependency from moto, explicit version needed to mitigate CVE-2023-46136 +werkzeug>=3.0.1 coverage>=7.3.2 pur>=7.3.1 moto>=4.2.7 -# Transitive dependency from moto, explicit version needed to mitigate CVE-2023-46136 -werkzeug>=3.0.1