Skip to content

Commit 647bd1f

Browse files
JamieMageeJamieMagee
authored
Update vulnerable dependencies in verification test fixtures (#1670)
Update dependency versions in test fixture files to resolve 91 known vulnerabilities (2 Critical, 39 High, 45 Medium) found by osv-scanner. Gradle (Maven ecosystem): - Bump AGP 7.1.0 -> 9.0.0 and Kotlin plugin 1.5.31 -> 2.3.10 - Regenerate lockfile, which pulls in patched transitives: jackson 2.11.1 (removed), netty 4.1.34 (removed), gson 2.8.6 -> 2.11.0, guava 30.1 -> 33.3.1, protobuf-java 3.10.0 -> 3.25.5, commons-io 2.4 -> 2.16.1, commons-compress 1.20 -> 1.27.1, bouncycastle 1.56 -> 1.79, jose4j 0.7.0 -> 0.9.5, httpclient 4.5.6 -> 4.5.14, tink 1.3.0-rc2 -> 1.7.0 pip (PyPI ecosystem): - requests 2.32.3 -> 2.32.4 (across 8 fixture files) - keras 3.9.2 -> 3.12.0 - urllib3 2.3.0 -> 2.6.0 - werkzeug 3.1.3 -> 3.1.5 - wheel 0.45.1 -> 0.46.2 - certifi 2024.6.2 -> 2025.1.31 (pre-generated/multiple) Go: - go directive 1.22 -> 1.24.4 (stdlib vuln GO-2025-3750)
1 parent c857e69 commit 647bd1f

File tree

11 files changed

+105
-153
lines changed

11 files changed

+105
-153
lines changed

‎test/Microsoft.ComponentDetection.VerificationTests/resources/go/go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/microsoft/component-detection
22

3-
go 1.22
3+
go 1.24.4
44

55
require github.com/sirupsen/logrus v1.8.3
66

‎test/Microsoft.ComponentDetection.VerificationTests/resources/gradle/build.gradle‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
buildscript {
2-
ext.kotlin_version = '1.5.31'
2+
ext.kotlin_version = '2.3.10'
33
repositories {
44
google()
55
mavenCentral()
66
}
77

88
dependencies {
9-
classpath 'com.android.tools.build:gradle:7.1.0'
9+
classpath 'com.android.tools.build:gradle:9.0.0'
1010
classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlin_version"
1111
}
1212

@@ -17,4 +17,4 @@ buildscript {
1717

1818
dependencyLocking {
1919
lockAllConfigurations()
20-
}
20+
}

‎test/Microsoft.ComponentDetection.VerificationTests/resources/gradle/buildscript-gradle.lockfile‎

Lines changed: 87 additions & 135 deletions
Original file line numberDiff line numberDiff line change
@@ -1,163 +1,115 @@
11
# This is a Gradle generated file for dependency locking.
22
# Manual edits can break the build and are not advised.
33
# This file is expected to be part of source control.
4-
androidx.databinding:databinding-common:7.1.0=classpath
5-
androidx.databinding:databinding-compiler-common:7.1.0=classpath
6-
com.android.databinding:baseLibrary:7.1.0=classpath
7-
com.android.tools.analytics-library:crash:30.1.0=classpath
8-
com.android.tools.analytics-library:protos:30.1.0=classpath
9-
com.android.tools.analytics-library:shared:30.1.0=classpath
10-
com.android.tools.analytics-library:tracker:30.1.0=classpath
11-
com.android.tools.build.jetifier:jetifier-core:1.0.0-beta09=classpath
12-
com.android.tools.build.jetifier:jetifier-processor:1.0.0-beta09=classpath
13-
com.android.tools.build:aapt2-proto:7.1.0-7984345=classpath
14-
com.android.tools.build:aaptcompiler:7.1.0=classpath
15-
com.android.tools.build:apksig:7.1.0=classpath
16-
com.android.tools.build:apkzlib:7.1.0=classpath
17-
com.android.tools.build:builder-model:7.1.0=classpath
18-
com.android.tools.build:builder-test-api:7.1.0=classpath
19-
com.android.tools.build:builder:7.1.0=classpath
20-
com.android.tools.build:bundletool:1.8.0=classpath
21-
com.android.tools.build:gradle-api:7.1.0=classpath
22-
com.android.tools.build:gradle:7.1.0=classpath
23-
com.android.tools.build:manifest-merger:30.1.0=classpath
24-
com.android.tools.build:transform-api:2.0.0-deprecated-use-gradle-api=classpath
25-
com.android.tools.ddms:ddmlib:30.1.0=classpath
26-
com.android.tools.layoutlib:layoutlib-api:30.1.0=classpath
27-
com.android.tools.lint:lint-model:30.1.0=classpath
28-
com.android.tools.utp:android-device-provider-ddmlib-proto:30.1.0=classpath
29-
com.android.tools.utp:android-device-provider-gradle-proto:30.1.0=classpath
30-
com.android.tools.utp:android-test-plugin-host-additional-test-output-proto:30.1.0=classpath
31-
com.android.tools.utp:android-test-plugin-host-coverage-proto:30.1.0=classpath
32-
com.android.tools.utp:android-test-plugin-host-retention-proto:30.1.0=classpath
33-
com.android.tools.utp:android-test-plugin-result-listener-gradle-proto:30.1.0=classpath
34-
com.android.tools:annotations:30.1.0=classpath
35-
com.android.tools:common:30.1.0=classpath
36-
com.android.tools:dvlib:30.1.0=classpath
37-
com.android.tools:repository:30.1.0=classpath
38-
com.android.tools:sdk-common:30.1.0=classpath
39-
com.android.tools:sdklib:30.1.0=classpath
40-
com.android:signflinger:7.1.0=classpath
41-
com.android:zipflinger:7.1.0=classpath
42-
com.fasterxml.jackson.core:jackson-annotations:2.11.1=classpath
43-
com.fasterxml.jackson.core:jackson-core:2.11.1=classpath
44-
com.fasterxml.jackson.core:jackson-databind:2.11.1=classpath
45-
com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.11.1=classpath
46-
com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.11.1=classpath
47-
com.fasterxml.jackson.module:jackson-module-kotlin:2.11.1=classpath
48-
com.fasterxml.woodstox:woodstox-core:6.2.1=classpath
49-
com.github.gundy:semver4j:0.16.4=classpath
50-
com.google.android:annotations:4.1.1.4=classpath
51-
com.google.api.grpc:proto-google-common-protos:1.12.0=classpath
4+
androidx.databinding:databinding-common:9.0.0=classpath
5+
androidx.databinding:databinding-compiler-common:9.0.0=classpath
6+
com.android.databinding:baseLibrary:9.0.0=classpath
7+
com.android.tools.analytics-library:crash:32.0.0=classpath
8+
com.android.tools.analytics-library:protos:32.0.0=classpath
9+
com.android.tools.analytics-library:shared:32.0.0=classpath
10+
com.android.tools.analytics-library:tracker:32.0.0=classpath
11+
com.android.tools.build.jetifier:jetifier-core:1.0.0-beta10=classpath
12+
com.android.tools.build.jetifier:jetifier-processor:1.0.0-beta10=classpath
13+
com.android.tools.build:aapt2-proto:9.0.0-14304508=classpath
14+
com.android.tools.build:aaptcompiler:9.0.0=classpath
15+
com.android.tools.build:apksig:9.0.0=classpath
16+
com.android.tools.build:apkzlib:9.0.0=classpath
17+
com.android.tools.build:builder-model:9.0.0=classpath
18+
com.android.tools.build:builder-test-api:9.0.0=classpath
19+
com.android.tools.build:builder:9.0.0=classpath
20+
com.android.tools.build:bundletool:1.18.3=classpath
21+
com.android.tools.build:gradle-api:9.0.0=classpath
22+
com.android.tools.build:gradle-common-api:9.0.0=classpath
23+
com.android.tools.build:gradle-settings-api:9.0.0=classpath
24+
com.android.tools.build:gradle:9.0.0=classpath
25+
com.android.tools.build:manifest-merger:32.0.0=classpath
26+
com.android.tools.ddms:ddmlib:32.0.0=classpath
27+
com.android.tools.layoutlib:layoutlib-api:32.0.0=classpath
28+
com.android.tools.lint:lint-model:32.0.0=classpath
29+
com.android.tools.lint:lint-typedef-remover:32.0.0=classpath
30+
com.android.tools.utp:gradle-work-action-api:32.0.0=classpath
31+
com.android.tools:annotations:32.0.0=classpath
32+
com.android.tools:common:32.0.0=classpath
33+
com.android.tools:dvlib:32.0.0=classpath
34+
com.android.tools:repository:32.0.0=classpath
35+
com.android.tools:sdk-common:32.0.0=classpath
36+
com.android.tools:sdklib:32.0.0=classpath
37+
com.android:signflinger:9.0.0=classpath
38+
com.android:zipflinger:9.0.0=classpath
5239
com.google.auto.value:auto-value-annotations:1.6.2=classpath
5340
com.google.code.findbugs:jsr305:3.0.2=classpath
54-
com.google.code.gson:gson:2.8.6=classpath
55-
com.google.crypto.tink:tink:1.3.0-rc2=classpath
41+
com.google.code.gson:gson:2.11.0=classpath
42+
com.google.crypto.tink:tink:1.7.0=classpath
5643
com.google.dagger:dagger:2.28.3=classpath
57-
com.google.errorprone:error_prone_annotations:2.3.4=classpath
44+
com.google.errorprone:error_prone_annotations:2.28.0=classpath
5845
com.google.flatbuffers:flatbuffers-java:1.12.0=classpath
59-
com.google.guava:failureaccess:1.0.1=classpath
60-
com.google.guava:guava:30.1-jre=classpath
46+
com.google.guava:failureaccess:1.0.2=classpath
47+
com.google.guava:guava:33.3.1-jre=classpath
6148
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=classpath
62-
com.google.j2objc:j2objc-annotations:1.3=classpath
49+
com.google.j2objc:j2objc-annotations:3.0.0=classpath
6350
com.google.jimfs:jimfs:1.1=classpath
64-
com.google.protobuf:protobuf-java-util:3.10.0=classpath
65-
com.google.protobuf:protobuf-java:3.10.0=classpath
66-
com.google.testing.platform:core-proto:0.0.8-alpha07=classpath
67-
com.googlecode.json-simple:json-simple:1.1=classpath
51+
com.google.protobuf:protobuf-java-util:3.25.5=classpath
52+
com.google.protobuf:protobuf-java:3.25.5=classpath
6853
com.googlecode.juniversalchardet:juniversalchardet:1.0.3=classpath
69-
com.squareup:javapoet:1.10.0=classpath
54+
com.squareup:javapoet:1.13.0=classpath
7055
com.squareup:javawriter:2.5.0=classpath
71-
com.sun.activation:javax.activation:1.2.0=classpath
7256
com.sun.istack:istack-commons-runtime:3.0.8=classpath
7357
com.sun.xml.fastinfoset:FastInfoset:1.2.16=classpath
74-
commons-codec:commons-codec:1.10=classpath
75-
commons-io:commons-io:2.4=classpath
58+
commons-codec:commons-codec:1.17.1=classpath
59+
commons-io:commons-io:2.16.1=classpath
7660
commons-logging:commons-logging:1.2=classpath
77-
de.undercouch:gradle-download-task:4.1.1=classpath
78-
io.grpc:grpc-api:1.21.1=classpath
79-
io.grpc:grpc-context:1.21.1=classpath
80-
io.grpc:grpc-core:1.21.1=classpath
81-
io.grpc:grpc-netty:1.21.1=classpath
82-
io.grpc:grpc-protobuf-lite:1.21.1=classpath
83-
io.grpc:grpc-protobuf:1.21.1=classpath
84-
io.grpc:grpc-stub:1.21.1=classpath
85-
io.netty:netty-buffer:4.1.34.Final=classpath
86-
io.netty:netty-codec-http2:4.1.34.Final=classpath
87-
io.netty:netty-codec-http:4.1.34.Final=classpath
88-
io.netty:netty-codec-socks:4.1.34.Final=classpath
89-
io.netty:netty-codec:4.1.34.Final=classpath
90-
io.netty:netty-common:4.1.34.Final=classpath
91-
io.netty:netty-handler-proxy:4.1.34.Final=classpath
92-
io.netty:netty-handler:4.1.34.Final=classpath
93-
io.netty:netty-resolver:4.1.34.Final=classpath
94-
io.netty:netty-transport:4.1.34.Final=classpath
95-
io.opencensus:opencensus-api:0.21.0=classpath
96-
io.opencensus:opencensus-contrib-grpc-metrics:0.21.0=classpath
97-
it.unimi.dsi:fastutil:8.4.0=classpath
9861
jakarta.activation:jakarta.activation-api:1.2.1=classpath
9962
jakarta.xml.bind:jakarta.xml.bind-api:2.3.2=classpath
10063
javax.inject:javax.inject:1=classpath
10164
net.java.dev.jna:jna-platform:5.6.0=classpath
10265
net.java.dev.jna:jna:5.6.0=classpath
10366
net.sf.jopt-simple:jopt-simple:4.9=classpath
10467
net.sf.kxml:kxml2:2.3.0=classpath
105-
org.antlr:antlr4:4.5.3=classpath
106-
org.apache.commons:commons-compress:1.20=classpath
107-
org.apache.httpcomponents:httpclient:4.5.6=classpath
108-
org.apache.httpcomponents:httpcore:4.4.10=classpath
68+
org.apache.commons:commons-compress:1.27.1=classpath
69+
org.apache.commons:commons-lang3:3.16.0=classpath
70+
org.apache.httpcomponents:httpclient:4.5.14=classpath
71+
org.apache.httpcomponents:httpcore:4.4.16=classpath
10972
org.apache.httpcomponents:httpmime:4.5.6=classpath
110-
org.bitbucket.b_c:jose4j:0.7.0=classpath
111-
org.bouncycastle:bcpkix-jdk15on:1.56=classpath
112-
org.bouncycastle:bcprov-jdk15on:1.56=classpath
113-
org.checkerframework:checker-qual:3.5.0=classpath
114-
org.codehaus.mojo:animal-sniffer-annotations:1.17=classpath
115-
org.codehaus.woodstox:stax2-api:4.2.1=classpath
73+
org.bitbucket.b_c:jose4j:0.9.5=classpath
74+
org.bouncycastle:bcpkix-jdk18on:1.79=classpath
75+
org.bouncycastle:bcprov-jdk18on:1.79=classpath
76+
org.bouncycastle:bcutil-jdk18on:1.79=classpath
77+
org.checkerframework:checker-qual:3.43.0=classpath
11678
org.glassfish.jaxb:jaxb-runtime:2.3.2=classpath
11779
org.glassfish.jaxb:txw2:2.3.2=classpath
11880
org.jdom:jdom2:2.0.6=classpath
119-
org.jetbrains.dokka:dokka-core:1.4.32=classpath
120-
org.jetbrains.intellij.deps:trove4j:1.0.20181211=classpath
121-
org.jetbrains.kotlin:kotlin-android-extensions:1.5.31=classpath
122-
org.jetbrains.kotlin:kotlin-annotation-processing-gradle:1.5.31=classpath
123-
org.jetbrains.kotlin:kotlin-build-common:1.5.31=classpath
124-
org.jetbrains.kotlin:kotlin-compiler-embeddable:1.5.31=classpath
125-
org.jetbrains.kotlin:kotlin-compiler-runner:1.5.31=classpath
126-
org.jetbrains.kotlin:kotlin-daemon-client:1.5.31=classpath
127-
org.jetbrains.kotlin:kotlin-daemon-embeddable:1.5.31=classpath
128-
org.jetbrains.kotlin:kotlin-gradle-plugin-api:1.5.31=classpath
129-
org.jetbrains.kotlin:kotlin-gradle-plugin-model:1.5.31=classpath
130-
org.jetbrains.kotlin:kotlin-gradle-plugin:1.5.31=classpath
131-
org.jetbrains.kotlin:kotlin-klib-commonizer-api:1.5.31=classpath
132-
org.jetbrains.kotlin:kotlin-native-utils:1.5.31=classpath
133-
org.jetbrains.kotlin:kotlin-project-model:1.5.31=classpath
134-
org.jetbrains.kotlin:kotlin-reflect:1.4.32=classpath
135-
org.jetbrains.kotlin:kotlin-scripting-common:1.5.31=classpath
136-
org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable:1.5.31=classpath
137-
org.jetbrains.kotlin:kotlin-scripting-compiler-impl-embeddable:1.5.31=classpath
138-
org.jetbrains.kotlin:kotlin-scripting-jvm:1.5.31=classpath
139-
org.jetbrains.kotlin:kotlin-stdlib-common:1.4.32=classpath
140-
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.4.32=classpath
141-
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.4.32=classpath
142-
org.jetbrains.kotlin:kotlin-stdlib:1.4.32=classpath
143-
org.jetbrains.kotlin:kotlin-tooling-metadata:1.5.31=classpath
144-
org.jetbrains.kotlin:kotlin-util-io:1.5.31=classpath
145-
org.jetbrains.kotlin:kotlin-util-klib:1.5.31=classpath
146-
org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.5.0=classpath
147-
org.jetbrains.kotlinx:kotlinx-coroutines-core:1.5.0=classpath
148-
org.jetbrains:annotations:13.0=classpath
149-
org.jetbrains:markdown-jvm:0.2.1=classpath
150-
org.jetbrains:markdown:0.2.1=classpath
151-
org.json:json:20180813=classpath
152-
org.jsoup:jsoup:1.13.1=classpath
81+
org.jetbrains.kotlin:abi-tools-api:2.3.10=classpath
82+
org.jetbrains.kotlin:fus-statistics-gradle-plugin:2.3.10=classpath
83+
org.jetbrains.kotlin:kotlin-build-statistics:2.3.10=classpath
84+
org.jetbrains.kotlin:kotlin-build-tools-api:2.3.10=classpath
85+
org.jetbrains.kotlin:kotlin-compiler-runner:2.3.10=classpath
86+
org.jetbrains.kotlin:kotlin-daemon-client:2.3.10=classpath
87+
org.jetbrains.kotlin:kotlin-gradle-plugin-annotations:2.3.10=classpath
88+
org.jetbrains.kotlin:kotlin-gradle-plugin-api:2.3.10=classpath
89+
org.jetbrains.kotlin:kotlin-gradle-plugin-idea-proto:2.3.10=classpath
90+
org.jetbrains.kotlin:kotlin-gradle-plugin-idea:2.3.10=classpath
91+
org.jetbrains.kotlin:kotlin-gradle-plugin:2.3.10=classpath
92+
org.jetbrains.kotlin:kotlin-gradle-plugins-bom:2.3.10=classpath
93+
org.jetbrains.kotlin:kotlin-klib-commonizer-api:2.3.10=classpath
94+
org.jetbrains.kotlin:kotlin-native-utils:2.3.10=classpath
95+
org.jetbrains.kotlin:kotlin-reflect:2.2.10=classpath
96+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:2.2.10=classpath
97+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:2.2.10=classpath
98+
org.jetbrains.kotlin:kotlin-stdlib:2.2.10=classpath
99+
org.jetbrains.kotlin:kotlin-tooling-core:2.3.10=classpath
100+
org.jetbrains.kotlin:kotlin-util-io:2.3.10=classpath
101+
org.jetbrains.kotlin:kotlin-util-klib-metadata:2.3.10=classpath
102+
org.jetbrains.kotlin:kotlin-util-klib:2.3.10=classpath
103+
org.jetbrains.kotlinx:kotlinx-coroutines-bom:1.9.0=classpath
104+
org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.9.0=classpath
105+
org.jetbrains.kotlinx:kotlinx-coroutines-core:1.9.0=classpath
106+
org.jetbrains:annotations:23.0.0=classpath
153107
org.jvnet.staxex:stax-ex:1.8.1=classpath
154-
org.ow2.asm:asm-analysis:9.1=classpath
155-
org.ow2.asm:asm-commons:9.1=classpath
156-
org.ow2.asm:asm-tree:9.1=classpath
157-
org.ow2.asm:asm-util:9.1=classpath
158-
org.ow2.asm:asm:9.1=classpath
108+
org.ow2.asm:asm-analysis:9.8=classpath
109+
org.ow2.asm:asm-commons:9.8=classpath
110+
org.ow2.asm:asm-tree:9.8=classpath
111+
org.ow2.asm:asm-util:9.8=classpath
112+
org.ow2.asm:asm:9.8=classpath
159113
org.slf4j:slf4j-api:1.7.30=classpath
160-
org.tensorflow:tensorflow-lite-metadata:0.1.0-rc2=classpath
161-
xerces:xercesImpl:2.12.0=classpath
162-
xml-apis:xml-apis:1.4.01=classpath
114+
org.tensorflow:tensorflow-lite-metadata:0.2.0=classpath
163115
empty=

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-1/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,5 @@ keyring==25.2.1
1010
more-itertools==10.2.0
1111
numpy==1.26.4
1212
pywin32-ctypes==0.2.2
13-
requests==2.32.3
13+
requests==2.32.4
1414
urllib3==2.6.3

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-2/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,5 @@ keyring==25.2.1
1010
more-itertools==10.2.0
1111
numpy==1.26.4
1212
pywin32-ctypes==0.2.2
13-
requests==2.32.3
13+
requests==2.32.4
1414
urllib3==2.6.3

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-3/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,5 @@ keyring==25.2.1
1010
more-itertools==10.2.0
1111
numpy==1.26.4
1212
pywin32-ctypes==0.2.2
13-
requests==2.32.3
13+
requests==2.32.4
1414
urllib3==2.6.3

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-4/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,5 @@ keyring==25.2.1
1010
more-itertools==10.2.0
1111
numpy==1.26.4
1212
pywin32-ctypes==0.2.2
13-
requests==2.32.3
13+
requests==2.32.4
1414
urllib3==2.6.3

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-5/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,5 @@ keyring==25.2.1
1010
more-itertools==10.2.0
1111
numpy==1.26.4
1212
pywin32-ctypes==0.2.2
13-
requests==2.32.3
13+
requests==2.32.4
1414
urllib3==2.6.3

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/pre-generated/multiple/requirements.txt‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
artifacts-keyring==0.3.4
2-
certifi==2024.6.2
2+
certifi==2025.1.31
33
charset-normalizer==3.3.2
44
Cython==3.0.10
55
jaraco.classes==3.4.0
@@ -9,4 +9,4 @@ keyring==25.2.1
99
more-itertools==10.2.0
1010
numpy==1.26.4
1111
pywin32-ctypes==0.2.2
12-
requests==2.32.3
12+
requests==2.32.4

‎test/Microsoft.ComponentDetection.VerificationTests/resources/pip/requirements.txt‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ google-pasta==0.2.0
88
grpcio==1.71.0
99
h5py==3.13.0
1010
idna==3.10
11-
keras==3.9.2
11+
keras==3.12.0
1212
libclang==18.1.1
1313
Markdown==3.7
1414
markdown-it-py==3.0.0
@@ -22,7 +22,7 @@ optree==0.14.1
2222
packaging==24.2
2323
protobuf==5.29.4
2424
Pygments==2.19.1
25-
requests==2.32.3
25+
requests==2.32.4
2626
rich==14.0.0
2727
setuptools==78.1.1
2828
six==1.17.0
@@ -31,7 +31,7 @@ tensorboard-data-server==0.7.2
3131
tensorflow==2.19.0
3232
termcolor==3.0.1
3333
typing_extensions==4.13.1
34-
urllib3==2.3.0
35-
Werkzeug==3.1.3
36-
wheel==0.45.1
37-
wrapt==1.17.2
34+
urllib3==2.6.0
35+
Werkzeug==3.1.5
36+
wheel==0.46.2
37+
wrapt==1.17.2

0 commit comments

Comments
 (0)