Bump pydantic from 2.7.4 to 2.9.2
Open

dependabot[bot] wants to merge dependabot/pip/main/pydantic-2.9.2 into main

#149

Last updated

Up to quality standards.

Diff coverage

No gate enabled

Coverage variation

0 %

Passes≥ -1% gate

Get instant feedback as you type

Codacy extension catches issues before they ever reach Git. Available for VSCode, JetBrains, Cursor and Windsurf.

Showing 3 issues

MINOR

Security

Insecure Modules Libraries

Potential

Insecure dependency certifi@2024.6.2 (CVE-2024-39689: python-certifi: Remove root certificates from `GLOBALTRUST` from the root store) (update to 2024.07.04)

poetry.lock

78name = "certifi"
MEDIUM

Security

Insecure Modules Libraries

Potential

Insecure dependency cryptography@42.0.8 (GHSA-h4gh-qq45-vh27: pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels) (update to 43.0.1)

poetry.lock

370name = "cryptography"
MINOR

Security

Insecure Modules Libraries

Potential

Insecure dependency certifi@2024.6.2 (CVE-2024-39689: python-certifi: Remove root certificates from `GLOBALTRUST` from the root store) (update to 2024.07.04)

requirements.txt

4certifi==2024.6.2 ; python_version >= "3.9" and python_version < "4.0"