]> git.ipfire.org Git - thirdparty/sqlalchemy/alembic.git/commitdiff
TEST: Set artificially low Mako minimum to test Dependabot
authorMike Bayer <mike_mp@zzzcomputing.com>
Sun, 31 May 2026 13:59:06 +0000 (09:59 -0400)
committerMike Bayer <mike_mp@zzzcomputing.com>
Sun, 31 May 2026 13:59:06 +0000 (09:59 -0400)
Setting Mako>=1.3.10 which is vulnerable to CVE-2026-44307
(GHSA-2h4p-vjrc-8xpq). This is to test whether Dependabot will
catch it and create a security alert/PR.

Mako 1.3.10 is vulnerable - fix is in 1.3.12.

Change-Id: I72079a47c3ecf6af5d153b96a6d3e22fa8e19563

pyproject.toml

index 0fbdb9c936bcb8e106af52044b6fec31516d587d..28626c25a9d98fb2f9979c842582c8227966da48 100644 (file)
@@ -27,7 +27,7 @@ classifiers = [
 requires-python = ">=3.10"
 dependencies = [
     "SQLAlchemy>=1.4.23",
-    "Mako",
+    "Mako>=1.3.10",
     "typing-extensions>=4.12",
     "tomli;python_version<'3.11'",
 ]