From 89ea9010e0ae9d16e363e7539e5f405f803e6aaf Mon Sep 17 00:00:00 2001
From: Mathieu Benoit <mathben@technolibre.ca>
Date: Sun, 1 Jan 2023 03:39:39 -0500
Subject: [PATCH] [UPD] poetry: security setuptools and pygments

---
 poetry.lock      | 15 ++++++++-------
 pyproject.toml   |  1 +
 requirements.txt |  2 ++
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index c502466..dd38430 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -4364,19 +4364,20 @@ pyyaml = ">=3.13"
 
 [[package]]
 name = "setuptools"
-version = "57.2.0"
+version = "65.5.1"
 description = "Easily download, build, install, upgrade, and uninstall Python packages"
 category = "main"
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 files = [
-    {file = "setuptools-57.2.0-py3-none-any.whl", hash = "sha256:b4bb42f3123fbb01e4f5f5ea9ed6d6b5f7021d18b3bc64236477a82aedf2190e"},
-    {file = "setuptools-57.2.0.tar.gz", hash = "sha256:a7e88b9bbaece494162d697d19525c567ab60c85dd7e2fd90cb7dfe8d8129a62"},
+    {file = "setuptools-65.5.1-py3-none-any.whl", hash = "sha256:d0b9a8433464d5800cbe05094acf5c6d52a91bfac9b52bcfc4d41382be5d5d31"},
+    {file = "setuptools-65.5.1.tar.gz", hash = "sha256:e197a19aa8ec9722928f2206f8de752def0e4c9fc6953527360d1c36d94ddb2f"},
 ]
 
 [package.extras]
-docs = ["jaraco.packaging (>=8.2)", "pygments-github-lexers (==0.0.5)", "rst.linker (>=1.9)", "sphinx", "sphinx-inline-tabs", "sphinxcontrib-towncrier"]
-testing = ["flake8-2020", "jaraco.envs", "jaraco.path (>=3.2.0)", "mock", "paver", "pip (>=19.1)", "pytest (>=4.6)", "pytest-black (>=0.3.7)", "pytest-checkdocs (>=2.4)", "pytest-cov", "pytest-enabler (>=1.0.1)", "pytest-flake8", "pytest-mypy", "pytest-virtualenv (>=1.2.7)", "pytest-xdist", "sphinx", "virtualenv (>=13.0.0)", "wheel"]
+docs = ["furo", "jaraco.packaging (>=9)", "jaraco.tidelift (>=1.4)", "pygments-github-lexers (==0.0.5)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-favicon", "sphinx-hoverxref (<2)", "sphinx-inline-tabs", "sphinx-notfound-page (==0.8.3)", "sphinx-reredirects", "sphinxcontrib-towncrier"]
+testing = ["build[virtualenv]", "filelock (>=3.4.0)", "flake8 (<5)", "flake8-2020", "ini2toml[lite] (>=0.9)", "jaraco.envs (>=2.2)", "jaraco.path (>=3.2.0)", "pip (>=19.1)", "pip-run (>=8.8)", "pytest (>=6)", "pytest-black (>=0.3.7)", "pytest-checkdocs (>=2.4)", "pytest-cov", "pytest-enabler (>=1.3)", "pytest-flake8", "pytest-mypy (>=0.9.1)", "pytest-perf", "pytest-timeout", "pytest-xdist", "tomli-w (>=1.0.0)", "virtualenv (>=13.0.0)", "wheel"]
+testing-integration = ["build[virtualenv]", "filelock (>=3.4.0)", "jaraco.envs (>=2.2)", "jaraco.path (>=3.2.0)", "pytest", "pytest-enabler", "pytest-xdist", "tomli", "virtualenv (>=13.0.0)", "wheel"]
 
 [[package]]
 name = "sgmllib3k"
@@ -5616,4 +5617,4 @@ files = [
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.7.16"
-content-hash = "fc025aacb123e6fee32b974d3c2c6f7145e5480715bebad6dae4e6b052573db7"
+content-hash = "deb44536154ed67ceb16756388651bb3e9ef7e17bbfda720ae27e99fda30f841"
diff --git a/pyproject.toml b/pyproject.toml
index 3e819ff..e760402 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -145,6 +145,7 @@ requests-toolbelt = "0.9.1"
 responses = "^0.22.0"
 retrying = "^1.3.4"
 serial = "^0.0.97"
+setuptools = "65.5.1"
 shapely = "^2.0.0"
 simplejson = "3.16.0"
 slugify = "^0.0.1"
diff --git a/requirements.txt b/requirements.txt
index 123fb5d..beee8b9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -101,3 +101,5 @@ boto3>=1.20.41
 PyPDF2==1.27.8
 mako==1.2.2
 pyjwt==2.5.0
+pygments==2.7.4
+setuptools==65.5.1