Merge pull request #32 from Renumics/ops/ignore-nbconvert-vulnerability

Ignore nbconvert vulnerability since dev dependency and not yet fixed

Author: druzsan

.github/workflows/ci.yml

@@ -99,7 +99,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - name: check
         run: |
-          poetry run pip-audit
+          poetry run pip-audit --ignore-vuln GHSA-xm59-rqc7-hhvf # not yet fixed, dev dependency
 
   doctest:
     name: "🧪 Run Doctests"

Makefile

@@ -31,7 +31,7 @@ typecheck: ## Typecheck source files
 
 .PHONY: audit
 audit: ## Audit project dependencies
-	poetry run pip-audit
+	poetry run pip-audit --ignore-vuln GHSA-xm59-rqc7-hhvf # not yet fixed, dev dependency
 
 .PHONY: check
 check: ## Run all checks