Skip to content

Commit c13ba38

Browse files
committed
Fix Dependabot alert for geopandas in test fixture
Update geopandas version constraint in tests/test-poetry-ibis/pyproject.toml from ">=0.6,<1" to ">=1.1.2,<2" to address CVE-2025-69662 (SQL injection in to_postgis()). This file is a test fixture used to test conda-lock's Poetry parsing and is never actually installed or executed, but the update satisfies automated security scanners.
1 parent d487939 commit c13ba38

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

tests/test-poetry-ibis/pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ duckdb = { version = ">=0.3.3,<1", optional = true }
5959
duckdb-engine = { version = ">=0.1.8,<1", optional = true }
6060
fsspec = { version = ">=2022.1.0", optional = true }
6161
GeoAlchemy2 = { version = ">=0.6.3,<1,!=0.13.0", optional = true }
62-
geopandas = { version = ">=0.6,<1", optional = true }
62+
geopandas = { version = ">=1.1.2,<2", optional = true }
6363
google-cloud-bigquery = { version = ">=3,<4", optional = true }
6464
google-cloud-bigquery-storage = { version = ">=2,<3", optional = true }
6565
graphviz = { version = ">=0.16,<1", optional = true }

0 commit comments

Comments
 (0)