Skip to content

Commit 9db0fe5

Browse files
committed
maint(safety): Bump deps & ignore jinja2 CVE (not affected)
Jinja2 is a dependency of safety itself, and safety complains that all versions of jinja2 >= 0 are vulnerable. We are not affected.
1 parent 33f9476 commit 9db0fe5

3 files changed

Lines changed: 224 additions & 238 deletions

File tree

.github/workflows/safety.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,5 +26,6 @@ jobs:
2626
- name: Prepare project for development
2727
run: python -m poetry install
2828

29+
# NOTE: Ignore issue 70612 in all versions of Jinja2 (not affected)
2930
- name: Run safety dependency check
30-
run: python -m poetry run safety check --full-report
31+
run: python -m poetry run safety check --full-report -i 70612

0 commit comments

Comments
 (0)