Merge pull request #622 from UW-GAC/maint/security-updates

Security updates
UW-GAC · Jun 25, 2024 · c17254d · c17254d
2 parents 71cf7b2 + 7910014
commit c17254d
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 12 deletions.
diff --git a/requirements/dev-requirements.txt b/requirements/dev-requirements.txt
@@ -60,7 +60,7 @@ filelock==3.13.1
     # via virtualenv
 identify==2.5.34
     # via pre-commit
-idna==3.3
+idna==3.7
     # via
     #   -c requirements/requirements.txt
     #   -c requirements/test-requirements.txt
@@ -131,7 +131,7 @@ pyyaml==6.0.1
     # via
     #   -c requirements/test-requirements.txt
     #   pre-commit
-requests==2.31.0
+requests==2.32.3
     # via
     #   -c requirements/requirements.txt
     #   -c requirements/test-requirements.txt
@@ -199,7 +199,7 @@ typing-extensions==4.8.0
     #   django-stubs-ext
     #   ipython
     #   mypy
-urllib3==2.1.0
+urllib3==2.2.2
     # via
     #   -c requirements/requirements.txt
     #   -c requirements/test-requirements.txt

diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -39,7 +39,7 @@ django-anvil-consortium-manager @ git+https://github.com/UW-GAC/django-anvil-con
 django-simple-history
 
 # Making HTTP requests to get dbgap study versions.
-requests
+requests>=2.32.0
 
 # For json schema validation.
 jsonschema
@@ -69,8 +69,9 @@ django-htmx
 
 # Temporary(?) pins to fix security alerts.
 certifi>=2023.7.22
-urllib3>=1.26.18
+urllib3>=2.2.2
 sqlparse>=0.4.4
+idna>=3.7
 
 # Dynamic settings
 django-constance

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -109,8 +109,10 @@ fontawesomefree==6.5.1
     # via django-anvil-consortium-manager
 google-auth==2.28.1
     # via django-anvil-consortium-manager
-idna==3.3
-    # via requests
+idna==3.7
+    # via
+    #   -r requirements/requirements.in
+    #   requests
 importlib-metadata==7.0.0
     # via build
 importlib-resources==6.1.1
@@ -184,7 +186,7 @@ referencing==0.33.0
     # via
     #   jsonschema
     #   jsonschema-specifications
-requests==2.31.0
+requests==2.32.3
     # via
     #   -r requirements/requirements.in
     #   django-allauth
@@ -220,7 +222,7 @@ typing-extensions==4.8.0
     # via asgiref
 tzdata==2023.4
     # via pandas
-urllib3==2.1.0
+urllib3==2.2.2
     # via
     #   -r requirements/requirements.in
     #   requests

diff --git a/requirements/test-requirements.txt b/requirements/test-requirements.txt
@@ -31,7 +31,7 @@ faker==23.2.1
     # via factory-boy
 freezegun==1.5.1
     # via -r requirements/test-requirements.in
-idna==3.3
+idna==3.7
     # via
     #   -c requirements/requirements.txt
     #   requests
@@ -75,7 +75,7 @@ python-dateutil==2.8.2
     #   freezegun
 pyyaml==6.0.1
     # via responses
-requests==2.31.0
+requests==2.32.3
     # via
     #   -c requirements/requirements.txt
     #   responses
@@ -97,7 +97,7 @@ typing-extensions==4.8.0
     #   -c requirements/requirements.txt
     #   django-test-migrations
     #   faker
-urllib3==2.1.0
+urllib3==2.2.2
     # via
     #   -c requirements/requirements.txt
     #   requests