Audit Snyk check/fix 2.6 (#11226)

* Audit Snyk check/fix 2.6

* Fix build issue

* Add missing zip in lock

---------

Co-authored-by: geo-ghci-int[bot] <146321879+geo-ghci-int[bot]@users.noreply.github.com>
Co-authored-by: Stéphane Brunner <stephane.brunner@camptocamp.com>

Pipfile

@@ -80,6 +80,7 @@ typing-extensions = "==3.7.4.3"
 waitress = "==2.1.2"
 webob = "==1.8.7"
 wrapt = "==1.12.1"
+zipp = "==3.19.2"
 
 [packages]
 alembic = "==1.5.8"  # geoportal

admin/requirements.txt

@@ -21,3 +21,4 @@ certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerabili
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability

docker/qgisserver/Dockerfile

@@ -10,7 +10,7 @@ COPY python/ /tmp/python/
 RUN cd /tmp/python/$(python3 --version|awk '{print $2}'|awk -F '.' '{print $1 "." $2}') && \
     PIP_NO_BINARY=shapely pipenv --python=$(python3 --version|awk '{print $2}') \
     install --system --deploy --clear && \
-    rm -rf /root/.local/share/virtualenv /root/.local/share/virtualenvs
+    rm -rf /root/.local/share/virtualenvs
 
 #############################################################################################################
 

geoportal/requirements.txt

@@ -37,3 +37,4 @@ certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerabili
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability