Update dependencies

exasol · Jul 3, 2024 · a86b965 · a86b965
1 parent 3e60237
commit a86b965
Show file tree

Hide file tree

Showing 3 changed files with 225 additions and 234 deletions.
diff --git a/doc/changes/unreleased.md b/doc/changes/unreleased.md
@@ -4,6 +4,15 @@
 
 The current release adds a dependency to plugin `pytest_exasol_saas` and replaces individual test fixtures by those provided by the plugin.
 
+Additionally the release fixes vulnerabilities by updating dependencies.
+
+However, the release ignores vulnerability CVE-2024-35195 in dependency `requests` as version `2.32.0` and higher is incompatible with docker-compose.
+
+## Security
+
+* Fixed vulnerabilities by updating dependencies
+  * Vulnerability CVE-2024-21503 in transitive dependency via `exasol-toolbox` to `black` in versions below `24.3.0`
+
 ## Refactorings
 
 * #141: Used plugin `pytest_exasol_saas`