Component Governance CVE-2021-42771 Py babel update (microsoft#1826)

BruceHaley · web-flow · commit 7b6f39f7fd85 · 2021-10-26T10:41:20.000-07:00
* Fix django vulnerability

* Update babel to 2.9.1

* Update outdated agent spec in pipeline
diff --git a/libraries/botbuilder-dialogs/setup.py b/libraries/botbuilder-dialogs/setup.py
@@ -11,7 +11,7 @@
     "recognizers-text-number>=1.0.2a1",
     "recognizers-text>=1.0.2a1",
     "recognizers-text-choice>=1.0.2a1",
-    "babel==2.7.0",
+    "babel==2.9.1",
     "botbuilder-schema==4.15.0",
     "botframework-connector==4.15.0",
     "botbuilder-core==4.15.0",
diff --git a/pipelines/botbuilder-python-ci.yml b/pipelines/botbuilder-python-ci.yml
@@ -15,7 +15,7 @@ jobs:
 - job: Build
 #Multi-configuration and multi-agent job options are not exported to YAML. Configure these options using documentation guidance: https://docs.microsoft.com/vsts/pipelines/process/phases
   pool:
-    name: Hosted Ubuntu 1604
+    vmImage: 'ubuntu-latest'
 
   strategy:
       matrix:
