python310Packages.cookiecutter: 1.7.3 -> 2.1.1

fixes CVE-2022-24065
This commit is contained in:
Robert Schütz 2022-06-21 00:22:37 +00:00
parent 12fb03569f
commit 68ead458d3

View file

@ -1,23 +1,31 @@
{ lib, buildPythonPackage, fetchPypi, isPyPy { lib, buildPythonPackage, fetchPypi, isPyPy
, pytest, pytest-cov, pytest-mock, freezegun , pytest, pytest-cov, pytest-mock, freezegun
, jinja2, future, binaryornot, click, whichcraft, poyo, jinja2_time, requests , jinja2, future, binaryornot, click, jinja2_time, requests
, python-slugify }: , python-slugify
, pyyaml
}:
buildPythonPackage rec { buildPythonPackage rec {
pname = "cookiecutter"; pname = "cookiecutter";
version = "1.7.3"; version = "2.1.1";
# not sure why this is broken # not sure why this is broken
disabled = isPyPy; disabled = isPyPy;
src = fetchPypi { src = fetchPypi {
inherit pname version; inherit pname version;
sha256 = "sha256-a5pNcoguJDvgd6c5fQ8fdv5mzz35HzEV27UzDiFPpFc="; sha256 = "sha256-85gr6NnFPawSYYZAE/3sf4Ov0uQu3m9t0GnF4UnFQNU=";
}; };
checkInputs = [ pytest pytest-cov pytest-mock freezegun ]; checkInputs = [ pytest pytest-cov pytest-mock freezegun ];
propagatedBuildInputs = [ propagatedBuildInputs = [
jinja2 future binaryornot click whichcraft poyo jinja2_time requests python-slugify binaryornot
jinja2
click
pyyaml
jinja2_time
python-slugify
requests
]; ];
# requires network access for cloning git repos # requires network access for cloning git repos