Merge pull request #108 from step-security/fix/vulnerability

amanstep · web-flow · commit d3b1f6d42a23 · 2025-07-21T11:04:23.000+05:30
fix: fixed vulnerabilities by upgrading dependencies and base image
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.13-alpine@sha256:b4d299311845147e7e47c970566906caf8378a1f04e5d3de65b5f2e834f8e3bf
+FROM python:3.13.5-alpine3.22@sha256:37b14db89f587f9eaa890e4a442a3fe55db452b69cca1403cc730bd0fbdc8aaf
 
 LABEL repository="https://github.com/step-security/publish-unit-test-result-action"
 LABEL homepage="https://github.com/step-security/publish-unit-test-result-action"
diff --git a/python/requirements-post-3.8.txt b/python/requirements-post-3.8.txt
@@ -13,6 +13,6 @@ PyGithub==2.4.0
     certifi==2024.8.30
     charset-normalizer==3.4.0
     idna==3.10
-    urllib3==2.2.3
+    urllib3==2.5.0
   typing_extensions==4.12.2
-  urllib3==2.2.3
+  urllib3==2.5.0

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM python:3.13-alpine@sha256:b4d299311845147e7e47c970566906caf8378a1f04e5d3de65b5f2e834f8e3bf`
	`1`	`+FROM python:3.13.5-alpine3.22@sha256:37b14db89f587f9eaa890e4a442a3fe55db452b69cca1403cc730bd0fbdc8aaf`
`2`	`2`
`3`	`3`	`LABEL repository="https://github.com/step-security/publish-unit-test-result-action"`
`4`	`4`	`LABEL homepage="https://github.com/step-security/publish-unit-test-result-action"`