Update requests and urllib library versions (#280)

This fixes security vulnerabilities in current versions of these packages.
qubole · Jul 31, 2019 · c5c035b · c5c035b
1 parent 915bdea
commit c5c035b
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 3 deletions.
diff --git a/.travis.yml b/.travis.yml
@@ -1,13 +1,12 @@
 language: python
 python:
-  - "2.6"
   - "2.7"
   - "3.3"
   - "3.4"
   - "3.5"
 # command to install dependencies
 install:
-  - pip install urllib3==1.22 requests
+  - pip install -r requirements.txt
   - "python setup.py install"
   - pip install mock
   - pip install pytest==3.2.0

diff --git a/requirements.txt b/requirements.txt
@@ -0,0 +1,8 @@
+boto==2.45.0
+certifi==2019.6.16
+chardet==3.0.4
+idna==2.8
+inflection==0.3.1
+requests==2.21.0
+six==1.12.0
+urllib3==1.24.3
diff --git a/setup.py b/setup.py
@@ -2,7 +2,7 @@
 import sys
 from setuptools import setup
 
-INSTALL_REQUIRES = ['requests >=1.0.3', 'boto >=2.45.0', 'six >=1.2.0', 'urllib3 >= 1.0.2', 'inflection >= 0.3.1']
+INSTALL_REQUIRES = ['requests >=2.21.0', 'boto >=2.45.0', 'six >=1.12.0', 'urllib3 >= 1.24.3', 'inflection >= 0.3.1']
 if sys.version_info < (2, 7, 0):
     INSTALL_REQUIRES.append('argparse>=1.1')