Commit 0713e63
security: remove dbt-fabricspark and dbt-vertica to fix Dependabot alerts
Remove dbt-fabricspark and dbt-vertica optional deps from lockfile
resolution — both were already excluded from the "all" extra and their
outdated upstream pins (dbt-core==1.8.5, azure-cli pre-release) caused
vulnerable transitive dependency versions to be resolved (deepdiff,
protobuf, pyopenssl, etc.). Without them, poetry resolves all 7
high/critical Dependabot alerts to patched versions naturally.
Users who need these adapters can still install them directly
(e.g. pip install dbt-fabricspark dbt-vertica).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>1 parent c24a73a commit 0713e63
1 file changed
Lines changed: 4 additions & 7 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
57 | 57 | | |
58 | 58 | | |
59 | 59 | | |
60 | | - | |
61 | 60 | | |
62 | | - | |
63 | 61 | | |
64 | 62 | | |
65 | 63 | | |
| |||
73 | 71 | | |
74 | 72 | | |
75 | 73 | | |
76 | | - | |
77 | 74 | | |
78 | | - | |
79 | | - | |
80 | | - | |
81 | | - | |
| 75 | + | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
82 | 79 | | |
83 | 80 | | |
84 | 81 | | |
| |||
0 commit comments