updated setup.py to set pyyaml minor to 5.4 for fixing vulnerabilities

mmelograno · mmelograno · commit dd3d3aa11581 · 2022-04-05T20:42:29.000-03:00
diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,3 +1,6 @@
+9.1.2 (April 6, 2022)
+- Updated pyyaml dependency for vulnerability CVE-2020-14343.
+
 9.1.1 (March 9, 2022)
 - Updated default auth service url to https://auth.split.io/api/v2/auth.
 - Deprecated old telemetry.
diff --git a/setup.py b/setup.py
@@ -16,7 +16,7 @@
 
 INSTALL_REQUIRES = [
     'requests>=2.9.1',
-    'pyyaml>=5.1',
+    'pyyaml>=5.4',
     'docopt>=0.6.2',
     'enum34;python_version<"3.4"',
 ]
diff --git a/splitio/version.py b/splitio/version.py
@@ -1 +1 @@
-__version__ = '9.1.1'
+__version__ = '9.1.2-rc1'
