Skip to content

Commit 24d34cd

Browse files
afabianisnyk-botgiohappy
authored
[Snyk] Security upgrade django from 3.2.21 to 3.2.22 (#11563)
* fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-5932095 * - Align setup.cfg to requirements.txt * upgrade spsycopg2 etup.cfg * - Align setup.cfg to requirements.txt --------- Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Giovanni Allegri <giohappy@gmail.com>
1 parent 38c2c39 commit 24d34cd

File tree

2 files changed

+7
-7
lines changed

2 files changed

+7
-7
lines changed

requirements.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
Pillow==10.0.1
33
lxml==4.9.3
44
psycopg2==2.9.9
5-
Django==3.2.21
5+
Django==3.2.22
66

77
# Other
88
amqp==5.1.1

setup.cfg

+6-6
Original file line numberDiff line numberDiff line change
@@ -27,16 +27,16 @@ install_requires =
2727
# native dependencies
2828
Pillow==10.0.1
2929
lxml==4.9.3
30-
psycopg2==2.9.7
31-
Django==3.2.21
30+
psycopg2==2.9.9
31+
Django==3.2.22
3232

3333
# Other
3434
amqp==5.1.1
3535
beautifulsoup4==4.12.2
3636
httplib2<0.22.1
3737
hyperlink==21.0.0
3838
idna>=2.5,<3.5
39-
urllib3==1.26.15
39+
urllib3==1.26.17
4040
Paver==1.3.4
4141
python-slugify==8.0.1
4242
decorator==5.1.1
@@ -134,7 +134,7 @@ install_requires =
134134
django-bootstrap3-datetimepicker-2==2.8.3
135135

136136
# storage manager dependencies
137-
django-storages==1.14
137+
django-storages==1.14.1
138138
dropbox==11.36.2
139139
google-cloud-storage==2.11.0
140140
google-cloud-core==2.3.3
@@ -170,7 +170,7 @@ install_requires =
170170
# production
171171
uWSGI==2.0.22
172172
gunicorn==21.2.0
173-
ipython==8.15.0
173+
ipython==8.16.1
174174
docker==6.1.3
175175
invoke==2.2.0
176176

@@ -195,7 +195,7 @@ install_requires =
195195
webdriver_manager==4.0.1
196196

197197
# Security and audit
198-
mistune==3.0.1
198+
mistune==3.0.2
199199
protobuf==3.20.3
200200
mako==1.2.4
201201
paramiko==3.3.1 # not directly required, fixes Blowfish deprecation warning

0 commit comments

Comments
 (0)