From a1d127c0ba8d867174f8fad209d61222870034eb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Apr 2026 23:13:19 +0000 Subject: [PATCH] chore(deps)(deps): bump the application-python group across 1 directory with 2 updates Updates the requirements on [python-hcl2](https://github.com/amplify-education/python-hcl2) and [checkov](https://github.com/bridgecrewio/checkov) to permit the latest version. Updates `python-hcl2` to 8.1.2 - [Release notes](https://github.com/amplify-education/python-hcl2/releases) - [Changelog](https://github.com/amplify-education/python-hcl2/blob/main/CHANGELOG.md) - [Commits](https://github.com/amplify-education/python-hcl2/compare/v7.3.1...v8.1.2) Updates `checkov` to 3.2.521 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](https://github.com/bridgecrewio/checkov/compare/3.2.517...3.2.521) --- updated-dependencies: - dependency-name: python-hcl2 dependency-version: 8.1.2 dependency-type: direct:production dependency-group: application-python - dependency-name: checkov dependency-version: 3.2.521 dependency-type: direct:production dependency-group: application-python ... Signed-off-by: dependabot[bot] --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 978f933b..b6af3eb3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,11 +2,11 @@ # NOTE: mkdocs removed - project uses docsify (see package.json devDependencies and index.html) # Infrastructure as Code Processing -python-hcl2~=7.3.1 # HCL2 (Terraform) configuration parser +python-hcl2~=8.1.2 # HCL2 (Terraform) configuration parser jinja2~=3.1.6 # Template engine for configuration generation # Security and Compliance Scanning -checkov~=3.2.517 # Infrastructure security and compliance scanner +checkov~=3.2.521 # Infrastructure security and compliance scanner # Security-Critical Dependencies (Version Pinned for CVE Remediation) asteval>=1.0.6 # Safe mathematical expression evaluator