fix: containers/sidecar-requirements.txt to reduce vulnerabilities

snyk-bot · mnencia · mnencia · commit 5790dd0bf9f7 · 2025-11-05T17:30:04.000+01:00
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 Signed-off-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com> Co-authored-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
diff --git a/containers/sidecar-requirements.in b/containers/sidecar-requirements.in
@@ -1,2 +1,3 @@
 barman[azure,cloud,google,snappy,zstandard,lz4]==3.16.2
 setuptools==80.9.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/containers/sidecar-requirements.txt b/containers/sidecar-requirements.txt
@@ -679,6 +679,10 @@ urllib3==2.5.0 \
     # via
     #   botocore
     #   requests
+zipp==3.23.0 \
+    --hash=sha256:071652d6115ed432f5ce1d34c336c0adfd6a884660d1e9712a256d3d3bd4b14e \
+    --hash=sha256:a07157588a12518c9d4034df3fbbee09c814741a33ff63c05fa29d26a2404166
+    # via -r sidecar-requirements.in
 zstandard==0.25.0 \
     --hash=sha256:011d388c76b11a0c165374ce660ce2c8efa8e5d87f34996aa80f9c0816698b64 \
     --hash=sha256:01582723b3ccd6939ab7b3a78622c573799d5d8737b534b86d0e06ac18dbde4a \

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`barman[azure,cloud,google,snappy,zstandard,lz4]==3.16.2`
`2`	`2`	`setuptools==80.9.0`
	`3`	`+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability`