Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update package versions to address security requirements #613

Merged
merged 4 commits into from
Jun 25, 2024
Merged

Update package versions to address security requirements #613

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
a0d8f73
Update package versions to address security requirements
amstilp Jun 25, 2024
733f55d
Fix idna version in requirements file
amstilp Jun 25, 2024
68d9911
Compile requirements files
amstilp Jun 25, 2024
a2ccaff
Merge pull request #614 from UW-GAC/pip-tools/update-requirements-fil…
amstilp Jun 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions requirements/dev-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ filelock==3.13.1
# via virtualenv
identify==2.5.35
# via pre-commit
idna==3.6
idna==3.7
# via
# -c requirements/requirements.txt
# -c requirements/test-requirements.txt
Expand Down Expand Up @@ -144,7 +144,7 @@ pyyaml==6.0.1
# via
# -c requirements/test-requirements.txt
# pre-commit
requests==2.31.0
requests==2.32.3
# via
# -c requirements/requirements.txt
# -c requirements/test-requirements.txt
Expand Down Expand Up @@ -215,7 +215,7 @@ typing-extensions==4.8.0
# ipython
# mypy
# pylint
urllib3==2.1.0
urllib3==2.2.2
# via
# -c requirements/requirements.txt
# -c requirements/test-requirements.txt
Expand Down
6 changes: 4 additions & 2 deletions requirements/requirements.in
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,11 +45,13 @@ mysqlclient # https://github.com/PyMySQL/mysqlclient
# See issue https://github.com/jazzband/django-simple-history/issues/1255
asgiref>=3.6

# Temporary fixes to handle dependabot not reading django-anvil-consortium-manager dependencies
# Temporary fixes to handle security vulnerabilities
certifi>=2023.7.22
pyjwt>=2.4.0
urllib3>=1.26.18
sqlparse>=0.4.4
idna>=3.7
urllib3>=2.2.2
requests>=2.32.0

# Dynamic settings
django-constance
Expand Down
11 changes: 7 additions & 4 deletions requirements/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,8 +96,10 @@ fontawesomefree==6.5.1
# via django-anvil-consortium-manager
google-auth==2.11.0
# via django-anvil-consortium-manager
idna==3.6
# via requests
idna==3.7
# via
# -r requirements/requirements.in
# requests
importlib-metadata==6.8.0
# via build
mysqlclient==2.2.4
Expand Down Expand Up @@ -142,8 +144,9 @@ pytz==2023.4
# via
# django-anvil-consortium-manager
# django-dbbackup
requests==2.31.0
requests==2.32.3
# via
# -r requirements/requirements.in
# django-allauth
# django-anvil-consortium-manager
# requests-oauthlib
Expand All @@ -166,7 +169,7 @@ tomli==2.0.1
# pyproject-hooks
typing-extensions==4.8.0
# via asgiref
urllib3==2.1.0
urllib3==2.2.2
# via
# -r requirements/requirements.in
# requests
Expand Down
6 changes: 3 additions & 3 deletions requirements/test-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ factory-boy==3.3.0
# via -r requirements/test-requirements.in
faker==23.2.1
# via factory-boy
idna==3.6
idna==3.7
# via
# -c requirements/requirements.txt
# requests
Expand Down Expand Up @@ -61,7 +61,7 @@ python-dateutil==2.8.2
# via faker
pyyaml==6.0.1
# via responses
requests==2.31.0
requests==2.32.3
# via
# -c requirements/requirements.txt
# responses
Expand All @@ -85,7 +85,7 @@ typing-extensions==4.8.0
# -c requirements/requirements.txt
# django-test-migrations
# faker
urllib3==2.1.0
urllib3==2.2.2
# via
# -c requirements/requirements.txt
# requests
Expand Down