chore(deps): Bump cvss from 2.6 to 3.0 (anchore#464)

Bumps [cvss](https://github.com/RedHatProductSecurity/cvss) from 2.6 to 3.0. - [Release notes](https://github.com/RedHatProductSecurity/cvss/releases) - [Commits](RedHatProductSecurity/cvss@v2.6...v3.0) --- updated-dependencies: - dependency-name: cvss dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
REC-SPb-ETU · Jan 25, 2024 · 1a1e370 · 1a1e370
1 parent ee89399
commit 1a1e370
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -47,7 +47,7 @@ colorlog = "^6.7.0"
 PyYAML = ">= 6.0, < 7.0"  # note: required for enterprise
 ijson = ">= 2.5.1, < 3.0"   # note: required for enterprise
 xxhash = "^3.1.0"
-cvss = "^2.6"
+cvss = ">=2.6,<4.0"
 python-dateutil = "^2.8.2"
 defusedxml = "^0.7.1"
 orjson = "^3.8.6"