From 4185fdd057c610de47001a4e271d468909983ff1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 28 Oct 2021 18:23:40 +0000
Subject: [PATCH 01/20] Bump charset-normalizer from 2.0.4 to 2.0.7

Bumps [charset-normalizer](https://github.com/ousret/charset_normalizer) from 2.0.4 to 2.0.7.
- [Release notes](https://github.com/ousret/charset_normalizer/releases)
- [Commits](https://github.com/ousret/charset_normalizer/compare/2.0.4...2.0.7)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 6d6bd3ddd2..df89f46814 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,12 +8,12 @@ CacheControl==0.12.6
 certifi==2021.5.30
 cfgv==3.3.1
 chardet==4.0.0
-charset-normalizer==2.0.4
+charset-normalizer==2.0.7
 colorama==0.4.4
 coloredlogs==15.0.1
 configparser==5.0.2
 contextlib2==21.6.0
-distlib==0.3.2
+distlib==0.3.3
 distro==1.6.0
 filelock==3.0.12
 fire==0.4.0
@@ -21,7 +21,7 @@ gitdb==4.0.7
 html5lib==1.1
 humanfriendly==10.0
 identify==2.2.13
-idna==3.2
+idna==3.3
 importlib-metadata==4.8.1
 importlib-resources==5.2.2
 ipaddr==2.2.0
@@ -66,11 +66,11 @@ stix2-patterns==1.3.2
 taxii2-client==2.3.0
 termcolor==1.1.0
 toml==0.10.2
-tomli==1.2.1
+tomli==1.2.2
 typing==3.7.4.3
 tzlocal==3.0
 urllib3==1.26.6
-virtualenv==20.7.2
+virtualenv==20.9.0
 wcwidth==0.2.5
 webencodings==0.5.1
 zipp==3.5.0

From 0838b26f2eb1853326921bb7e573ed5d16ddf264 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Nov 2021 02:08:58 +0000
Subject: [PATCH 02/20] Bump ansible in
 /bin/automated_detection_testing/ci/labeled_data

Bumps [ansible](https://github.com/ansible/ansible) from 2.9.20 to 4.2.0.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/commits)

---
updated-dependencies:
- dependency-name: ansible
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../ci/labeled_data/requirements.txt                            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/automated_detection_testing/ci/labeled_data/requirements.txt b/bin/automated_detection_testing/ci/labeled_data/requirements.txt
index 698a3b0abf..4ec326670d 100644
--- a/bin/automated_detection_testing/ci/labeled_data/requirements.txt
+++ b/bin/automated_detection_testing/ci/labeled_data/requirements.txt
@@ -1,4 +1,4 @@
-ansible==2.9.20
+ansible==4.2.0
 ansible-runner==1.4.4
 attackcti==0.3.4.3
 boto3==1.11.0

From aff959cb32d8db393fd50898798d4b33664d96a9 Mon Sep 17 00:00:00 2001
From: Xiao Lin <xlin@splunk.com>
Date: Wed, 10 Nov 2021 11:18:34 -0800
Subject: [PATCH 03/20] deprecate detect_pass_hash

---
 .../deprecated/ssa___detect_pass_hash.yml     | 82 +++++++++++++++++++
 1 file changed, 82 insertions(+)
 create mode 100644 detections/deprecated/ssa___detect_pass_hash.yml

diff --git a/detections/deprecated/ssa___detect_pass_hash.yml b/detections/deprecated/ssa___detect_pass_hash.yml
new file mode 100644
index 0000000000..49ae7ca771
--- /dev/null
+++ b/detections/deprecated/ssa___detect_pass_hash.yml
@@ -0,0 +1,82 @@
+name: Detect Pass the Hash
+id: 7cd8b9fa-6b0c-424f-92a6-9c5287a72f5f
+version: 1
+date: '2020-10-21'
+author: Xiao Lin, Splunk
+type: TTP
+datamodel: []
+description: This search looks for specific authentication events from the Windows
+  Security Event logs to detect potential attempts using Pass-the-Hash technique.
+search: ' | from read_ssa_enriched_events()
+
+  | eval timestamp=parse_long(ucast(map_get(input_event, "_time"), "string", null))
+  | eval signature_id=map_get(input_event, "signature_id"), authentication_type=map_get(input_event,
+  "authentication_type"), authentication_method=map_get(input_event, "authentication_method"),
+  origin_device_domain=map_get(input_event, "origin_device_domain"), dest_user_id=ucast(map_get(input_event,
+  "dest_user_id"), "string", null), dest_device_id=ucast(map_get(input_event, "dest_device_id"),
+  "string", null), event_id=ucast(map_get(input_event, "event_id"), "string", null)
+
+  | where (authentication_type="3" AND authentication_method="NtLmSsp") OR (authentication_type="9"
+  AND authentication_method="seclogo")
+
+  | eval start_time=timestamp, end_time=timestamp, entities=mvappend(dest_device_id,
+  dest_user_id), body=create_map(["event_id", event_id, "authentication_type", authentication_type,
+  "authentication_method", authentication_method]) | into write_ssa_detected_events();'
+how_to_implement: The test data is converted from Windows Security Event logs generated
+  from Attach Range simulation and used in SPL search and extended to SPL2
+known_false_positives: Legitimate logon activity by authorized NTLM systems may be
+  detected by this search. Please investigate as appropriate.
+references:
+- Initial ESCU implementation by Bhavin Patel and Patrick Bareiss
+tags:
+  analytic_story:
+  - Lateral Movement
+  cis20:
+  - CIS 3
+  - CIS 5
+  - CIS 16
+  confidence: 20
+  context:
+  - Source:AD
+  - Source:Endpoint
+  - Stage:Credential Access
+  impact: 80
+  kill_chain_phases:
+  - Actions on Objectives
+  message: Potential use of the pass the hash/token attacks that spoof authentication.
+    Operation is performed at the device $dest_device_id$, by the account $dest_user_id$
+    via command $cmd_line$
+  mitre_attack_id:
+  - T1550
+  - T1550.002
+  nist:
+  - PR.PT
+  - PR.AT
+  - PR.AC
+  - PR.IP
+  observable:
+  - name: dest_user_id
+    type: User
+    role:
+    - Actor
+  - name: dest_device_id
+    type: Hostname
+    role:
+    - Victim
+  - name: cmd_line
+    type: processname
+    role:
+    - Others
+  product:
+  - Splunk Behavioral Analytics
+  required_fields:
+  - signature_id
+  - authentication_type
+  - _time
+  - authentication_method
+  - origin_device_domain
+  - dest_user_id
+  - dest_device_id
+  risk_score: 16
+  risk_severity: low
+  security_domain: endpoint

From 5e765a76d7fc54574f3f207cb44b80e38b3e8085 Mon Sep 17 00:00:00 2001
From: Xiao Lin <xlin@splunk.com>
Date: Wed, 10 Nov 2021 11:29:08 -0800
Subject: [PATCH 04/20] deprecate detect_pass_hash

---
 .../endpoint/ssa___detect_pass_hash.yml       | 82 -------------------
 1 file changed, 82 deletions(-)
 delete mode 100644 detections/endpoint/ssa___detect_pass_hash.yml

diff --git a/detections/endpoint/ssa___detect_pass_hash.yml b/detections/endpoint/ssa___detect_pass_hash.yml
deleted file mode 100644
index 49ae7ca771..0000000000
--- a/detections/endpoint/ssa___detect_pass_hash.yml
+++ /dev/null
@@ -1,82 +0,0 @@
-name: Detect Pass the Hash
-id: 7cd8b9fa-6b0c-424f-92a6-9c5287a72f5f
-version: 1
-date: '2020-10-21'
-author: Xiao Lin, Splunk
-type: TTP
-datamodel: []
-description: This search looks for specific authentication events from the Windows
-  Security Event logs to detect potential attempts using Pass-the-Hash technique.
-search: ' | from read_ssa_enriched_events()
-
-  | eval timestamp=parse_long(ucast(map_get(input_event, "_time"), "string", null))
-  | eval signature_id=map_get(input_event, "signature_id"), authentication_type=map_get(input_event,
-  "authentication_type"), authentication_method=map_get(input_event, "authentication_method"),
-  origin_device_domain=map_get(input_event, "origin_device_domain"), dest_user_id=ucast(map_get(input_event,
-  "dest_user_id"), "string", null), dest_device_id=ucast(map_get(input_event, "dest_device_id"),
-  "string", null), event_id=ucast(map_get(input_event, "event_id"), "string", null)
-
-  | where (authentication_type="3" AND authentication_method="NtLmSsp") OR (authentication_type="9"
-  AND authentication_method="seclogo")
-
-  | eval start_time=timestamp, end_time=timestamp, entities=mvappend(dest_device_id,
-  dest_user_id), body=create_map(["event_id", event_id, "authentication_type", authentication_type,
-  "authentication_method", authentication_method]) | into write_ssa_detected_events();'
-how_to_implement: The test data is converted from Windows Security Event logs generated
-  from Attach Range simulation and used in SPL search and extended to SPL2
-known_false_positives: Legitimate logon activity by authorized NTLM systems may be
-  detected by this search. Please investigate as appropriate.
-references:
-- Initial ESCU implementation by Bhavin Patel and Patrick Bareiss
-tags:
-  analytic_story:
-  - Lateral Movement
-  cis20:
-  - CIS 3
-  - CIS 5
-  - CIS 16
-  confidence: 20
-  context:
-  - Source:AD
-  - Source:Endpoint
-  - Stage:Credential Access
-  impact: 80
-  kill_chain_phases:
-  - Actions on Objectives
-  message: Potential use of the pass the hash/token attacks that spoof authentication.
-    Operation is performed at the device $dest_device_id$, by the account $dest_user_id$
-    via command $cmd_line$
-  mitre_attack_id:
-  - T1550
-  - T1550.002
-  nist:
-  - PR.PT
-  - PR.AT
-  - PR.AC
-  - PR.IP
-  observable:
-  - name: dest_user_id
-    type: User
-    role:
-    - Actor
-  - name: dest_device_id
-    type: Hostname
-    role:
-    - Victim
-  - name: cmd_line
-    type: processname
-    role:
-    - Others
-  product:
-  - Splunk Behavioral Analytics
-  required_fields:
-  - signature_id
-  - authentication_type
-  - _time
-  - authentication_method
-  - origin_device_domain
-  - dest_user_id
-  - dest_device_id
-  risk_score: 16
-  risk_severity: low
-  security_domain: endpoint

From 464d42703b5d8ea61f8fb2108c0ce7525a7520ee Mon Sep 17 00:00:00 2001
From: patel-bhavin <bhavin.j.patel91@gmail.com>
Date: Thu, 11 Nov 2021 11:46:56 -0800
Subject: [PATCH 05/20] remove test file

---
 tests/endpoint/ssa___detect_pass_hash.test.yml | 12 ------------
 1 file changed, 12 deletions(-)
 delete mode 100644 tests/endpoint/ssa___detect_pass_hash.test.yml

diff --git a/tests/endpoint/ssa___detect_pass_hash.test.yml b/tests/endpoint/ssa___detect_pass_hash.test.yml
deleted file mode 100644
index f0f2098ac0..0000000000
--- a/tests/endpoint/ssa___detect_pass_hash.test.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-name: Detect Pass the Hash - SSA Unit test
-tests:
-  - name: Detect Pass the Hash
-    file: endpoint/ssa___detect_pass_hash.yml 
-    pass_condition: '@count_gt(0)'
-    description: Test detection of pass-the-hash
-    attack_data:
-      - file_name: windows-security.log
-        data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1550.002/atomic_red_team/windows-security.log
-        source: WinEventLog:Security
-
-

From 9fa56419d668134554369f4954190d6b5a8ece15 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 22:38:07 +0000
Subject: [PATCH 06/20] Bump backports-entry-points-selectable from 1.1.0 to
 1.1.1

Bumps [backports-entry-points-selectable](https://github.com/jaraco/backports.entry_points_selectable) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/jaraco/backports.entry_points_selectable/releases)
- [Changelog](https://github.com/jaraco/backports.entry_points_selectable/blob/main/CHANGES.rst)
- [Commits](https://github.com/jaraco/backports.entry_points_selectable/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: backports-entry-points-selectable
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index cdbb0cd114..bf879a47dd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,12 +3,12 @@ appdirs==1.4.4
 aspy.yaml==1.3.0
 attackcti==0.3.4.4
 attrs==21.2.0
-backports.entry-points-selectable==1.1.0
+backports.entry-points-selectable==1.1.1
 CacheControl==0.12.6
 certifi==2021.5.30
 cfgv==3.3.1
 chardet==4.0.0
-charset-normalizer==2.0.4
+charset-normalizer==2.0.7
 colorama==0.4.4
 coloredlogs==15.0.1
 configparser==5.0.2

From 5f88cd2caec75943cd4c7ea76824a919f61d17c1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 22:54:12 +0000
Subject: [PATCH 07/20] Bump cachecontrol from 0.12.6 to 0.12.10

Bumps [cachecontrol](https://github.com/ionrock/cachecontrol) from 0.12.6 to 0.12.10.
- [Release notes](https://github.com/ionrock/cachecontrol/releases)
- [Changelog](https://github.com/ionrock/cachecontrol/blob/master/docs/release_notes.rst)
- [Commits](https://github.com/ionrock/cachecontrol/compare/v0.12.6...v0.12.10)

---
updated-dependencies:
- dependency-name: cachecontrol
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index bf879a47dd..431c345b4d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@ aspy.yaml==1.3.0
 attackcti==0.3.4.4
 attrs==21.2.0
 backports.entry-points-selectable==1.1.1
-CacheControl==0.12.6
+CacheControl==0.12.10
 certifi==2021.5.30
 cfgv==3.3.1
 chardet==4.0.0

From 018c540aaf1c893f252677748be3c24fcc430787 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 22:59:24 +0000
Subject: [PATCH 08/20] Bump pillow from 8.3.2 to 8.4.0

Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.3.2 to 8.4.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/8.3.2...8.4.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index bf879a47dd..65d0231491 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@ aspy.yaml==1.3.0
 attackcti==0.3.4.4
 attrs==21.2.0
 backports.entry-points-selectable==1.1.1
-CacheControl==0.12.6
+CacheControl==0.12.10
 certifi==2021.5.30
 cfgv==3.3.1
 chardet==4.0.0
@@ -36,7 +36,7 @@ packaging==21.0
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
+Pillow==8.4.0
 platformdirs==2.3.0
 pre-commit==2.14.1
 progress==1.6

From 51e4c1157961a7668c139f1cc460c9295b37018a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:00:29 +0000
Subject: [PATCH 09/20] Bump jsonschema from 3.2.0 to 4.2.1

Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.2.0 to 4.2.1.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 431c345b4d..9109ff8b9b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -26,7 +26,7 @@ importlib-metadata==4.8.1
 importlib-resources==5.2.2
 ipaddr==2.2.0
 Jinja2==3.0.2
-jsonschema==3.2.0
+jsonschema==4.2.1
 lockfile==0.12.2
 MarkupSafe==2.0.1
 more-itertools==8.8.0

From 37c5a8951da14cde93cc358491048809cf8cdf5e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:06:39 +0000
Subject: [PATCH 10/20] Bump regex from 2021.8.28 to 2021.11.10

Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2021.8.28 to 2021.11.10.
- [Release notes](https://github.com/mrabarnett/mrab-regex/releases)
- [Commits](https://github.com/mrabarnett/mrab-regex/commits)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 431c345b4d..30058a9ee6 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -26,7 +26,7 @@ importlib-metadata==4.8.1
 importlib-resources==5.2.2
 ipaddr==2.2.0
 Jinja2==3.0.2
-jsonschema==3.2.0
+jsonschema==4.2.1
 lockfile==0.12.2
 MarkupSafe==2.0.1
 more-itertools==8.8.0
@@ -52,7 +52,7 @@ pytoml==0.1.21
 pytz==2021.1
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0

From 4e27a56a28980ced5871afc9e35b930078bc2060 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:07:03 +0000
Subject: [PATCH 11/20] Bump pytz from 2021.1 to 2021.3

Bumps [pytz](https://github.com/stub42/pytz) from 2021.1 to 2021.3.
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](https://github.com/stub42/pytz/compare/release_2021.1...release_2021.3)

---
updated-dependencies:
- dependency-name: pytz
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 431c345b4d..eaa5049230 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -26,7 +26,7 @@ importlib-metadata==4.8.1
 importlib-resources==5.2.2
 ipaddr==2.2.0
 Jinja2==3.0.2
-jsonschema==3.2.0
+jsonschema==4.2.1
 lockfile==0.12.2
 MarkupSafe==2.0.1
 more-itertools==8.8.0
@@ -49,7 +49,7 @@ pyparsing==2.4.7
 pyrsistent==0.18.0
 python-dateutil==2.8.2
 pytoml==0.1.21
-pytz==2021.1
+pytz==2021.3
 pytzdata==2020.1
 PyYAML==6.0
 regex==2021.8.28

From 16f584058561078a8838e916424de4bd66030cb1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:13:29 +0000
Subject: [PATCH 12/20] Bump virtualenv from 20.9.0 to 20.10.0

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.9.0 to 20.10.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.9.0...20.10.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 9109ff8b9b..4c96694fab 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -36,7 +36,7 @@ packaging==21.0
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
+Pillow==8.4.0
 platformdirs==2.3.0
 pre-commit==2.14.1
 progress==1.6
@@ -52,7 +52,7 @@ pytoml==0.1.21
 pytz==2021.1
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0
@@ -70,7 +70,7 @@ tomli==1.2.2
 typing==3.7.4.3
 tzlocal==3.0
 urllib3==1.26.6
-virtualenv==20.9.0
+virtualenv==20.10.0
 wcwidth==0.2.5
 webencodings==0.5.1
 zipp==3.5.0

From 50e52dc46d1b24dc8cd890ecb089c1da65a4d75d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:13:34 +0000
Subject: [PATCH 13/20] Bump gitdb from 4.0.7 to 4.0.9

Bumps [gitdb](https://github.com/gitpython-developers/gitdb) from 4.0.7 to 4.0.9.
- [Release notes](https://github.com/gitpython-developers/gitdb/releases)
- [Commits](https://github.com/gitpython-developers/gitdb/compare/4.0.7...4.0.9)

---
updated-dependencies:
- dependency-name: gitdb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 9109ff8b9b..b17ac49ce1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ distlib==0.3.3
 distro==1.6.0
 filelock==3.2
 fire==0.4.0
-gitdb==4.0.7
+gitdb==4.0.9
 html5lib==1.1
 humanfriendly==10.0
 identify==2.2.13
@@ -36,7 +36,7 @@ packaging==21.0
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
+Pillow==8.4.0
 platformdirs==2.3.0
 pre-commit==2.14.1
 progress==1.6
@@ -52,7 +52,7 @@ pytoml==0.1.21
 pytz==2021.1
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0

From 94b1eb7f4dc1161920eaf73a5fa0031eacaaa1c3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:13:37 +0000
Subject: [PATCH 14/20] Bump filelock from 3.2 to 3.3.2

Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.2 to 3.3.2.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.2.0...3.3.2)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 9109ff8b9b..a0a28119b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -15,7 +15,7 @@ configparser==5.0.2
 contextlib2==21.6.0
 distlib==0.3.3
 distro==1.6.0
-filelock==3.2
+filelock==3.3.2
 fire==0.4.0
 gitdb==4.0.7
 html5lib==1.1
@@ -36,7 +36,7 @@ packaging==21.0
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
+Pillow==8.4.0
 platformdirs==2.3.0
 pre-commit==2.14.1
 progress==1.6
@@ -52,7 +52,7 @@ pytoml==0.1.21
 pytz==2021.1
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0

From a0efafa34918aeb1ac9ee1a26c9eb9779197242a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:13:49 +0000
Subject: [PATCH 15/20] Bump packaging from 21.0 to 21.2

Bumps [packaging](https://github.com/pypa/packaging) from 21.0 to 21.2.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/21.0...21.2)

---
updated-dependencies:
- dependency-name: packaging
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 9109ff8b9b..e8fee13e2d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,11 +32,11 @@ MarkupSafe==2.0.1
 more-itertools==8.8.0
 msgpack==1.0.2
 nodeenv==1.6.0
-packaging==21.0
+packaging==21.2
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
+Pillow==8.4.0
 platformdirs==2.3.0
 pre-commit==2.14.1
 progress==1.6
@@ -52,7 +52,7 @@ pytoml==0.1.21
 pytz==2021.1
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0

From ebf0c1dddd55db6d300cee6e28a4b1569f251cd5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:19:09 +0000
Subject: [PATCH 16/20] Bump importlib-metadata from 4.8.1 to 4.8.2

Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 4.8.1 to 4.8.2.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/CHANGES.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v4.8.1...v4.8.2)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index c6cbc13f71..68292cd9ba 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -22,7 +22,7 @@ html5lib==1.1
 humanfriendly==10.0
 identify==2.2.13
 idna==3.3
-importlib-metadata==4.8.1
+importlib-metadata==4.8.2
 importlib-resources==5.2.2
 ipaddr==2.2.0
 Jinja2==3.0.2
@@ -49,7 +49,7 @@ pyparsing==2.4.7
 pyrsistent==0.18.0
 python-dateutil==2.8.2
 pytoml==0.1.21
-pytz==2021.1
+pytz==2021.3
 pytzdata==2020.1
 PyYAML==6.0
 regex==2021.11.10

From df05561fd607f5d5fb6ca7c3bd5c6454702f1c41 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:20:14 +0000
Subject: [PATCH 17/20] Bump platformdirs from 2.3.0 to 2.4.0

Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](https://github.com/platformdirs/platformdirs/compare/2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 7e379ac993..3477019f81 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -37,7 +37,7 @@ pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
 Pillow==8.4.0
-platformdirs==2.3.0
+platformdirs==2.4.0
 pre-commit==2.14.1
 progress==1.6
 prompt-toolkit==1.0.14

From e6300882b1a89299e43db6f45cea5f69b851f13f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:25:20 +0000
Subject: [PATCH 18/20] Bump certifi from 2021.5.30 to 2021.10.8

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2021.10.8.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2021.05.30...2021.10.08)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 7e379ac993..6e07184005 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,7 +5,7 @@ attackcti==0.3.4.4
 attrs==21.2.0
 backports.entry-points-selectable==1.1.1
 CacheControl==0.12.10
-certifi==2021.5.30
+certifi==2021.10.8
 cfgv==3.3.1
 chardet==4.0.0
 charset-normalizer==2.0.7
@@ -70,7 +70,7 @@ tomli==1.2.2
 typing==3.7.4.3
 tzlocal==3.0
 urllib3==1.26.6
-virtualenv==20.9.0
+virtualenv==20.10.0
 wcwidth==0.2.5
 webencodings==0.5.1
 zipp==3.5.0

From 94e6961c4e7f8c42a234fd788f501e748a92ef80 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:25:23 +0000
Subject: [PATCH 19/20] Bump zipp from 3.5.0 to 3.6.0

Bumps [zipp](https://github.com/jaraco/zipp) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: zipp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 7e379ac993..9509c7eed5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -70,7 +70,7 @@ tomli==1.2.2
 typing==3.7.4.3
 tzlocal==3.0
 urllib3==1.26.6
-virtualenv==20.9.0
+virtualenv==20.10.0
 wcwidth==0.2.5
 webencodings==0.5.1
-zipp==3.5.0
+zipp==3.6.0

From c66fafe307b828fbcb973201eae15ce0f567b185 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 23:33:01 +0000
Subject: [PATCH 20/20] Bump jinja2 from 3.0.2 to 3.0.3

Bumps [jinja2](https://github.com/pallets/jinja) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 11855a9882..7f6840b2ac 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -15,9 +15,9 @@ configparser==5.0.2
 contextlib2==21.6.0
 distlib==0.3.3
 distro==1.6.0
-filelock==3.2
+filelock==3.3.2
 fire==0.4.0
-gitdb==4.0.7
+gitdb==4.0.9
 html5lib==1.1
 humanfriendly==10.0
 identify==2.2.13
@@ -25,19 +25,19 @@ idna==3.3
 importlib-metadata==4.8.1
 importlib-resources==5.2.2
 ipaddr==2.2.0
-Jinja2==3.0.2
+Jinja2==3.0.3
 jsonschema==4.2.1
 lockfile==0.12.2
 MarkupSafe==2.0.1
 more-itertools==8.8.0
 msgpack==1.0.2
 nodeenv==1.6.0
-packaging==21.0
+packaging==21.2
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
 Pillow==8.4.0
-platformdirs==2.3.0
+platformdirs==2.4.0
 pre-commit==2.14.1
 progress==1.6
 prompt-toolkit==1.0.14