Security-related updates for some Python dependencies.

requirements/requirements.in

@@ -1,15 +1,15 @@
-aiohttp
+aiohttp>=3.7.4
 ansiconv==1.0.0  # UPGRADE BLOCKER: from 2013, consider replacing instead of upgrading
 asciichartpy
 autobahn>=20.12.3  # CVE-2020-35678
 azure-keyvault==1.1.0  # see UPGRADE BLOCKERs
 channels
 channels-redis>=3.1.0  # https://github.com/django/channels_redis/issues/212
-cryptography<3.0.0
+cryptography>=3.2
 Cython<3 # Since the bump to PyYAML 5.4.1 this is now a mandatory dep
 daphne
 distro
-django==2.2.20  # see UPGRADE BLOCKERs
+django==2.2.24  # see UPGRADE BLOCKERs
 django-auth-ldap
 django-cors-headers>=3.5.0
 django-crum
@@ -29,7 +29,7 @@ djangorestframework>=3.12.1
 djangorestframework-yaml
 GitPython>=3.1.1  # minimum to fix https://github.com/ansible/awx/issues/6119
 irc
-jinja2>=2.11.0  # required for ChainableUndefined
+jinja2>=2.11.3  # CVE-2020-28493
 JSON-log-formatter
 jsonschema
 Markdown  # used for formatting API help

requirements/requirements.txt

@@ -1,6 +1,6 @@
 adal==1.2.2
     # via msrestazure
-aiohttp==3.6.2
+aiohttp==3.7.4
     # via -r /awx_devel/requirements/requirements.in
 aioredis==1.3.1
     # via channels-redis
@@ -53,14 +53,14 @@ channels==2.4.0
 channels-redis==3.1.0
     # via -r /awx_devel/requirements/requirements.in
 chardet==3.0.4
-    # via
-    #   aiohttp
-    #   requests
+    # via aiohttp
+charset-normalizer==2.0.7
+    # via requests
 click==7.1.2
     # via receptorctl
 constantly==15.1.0
     # via twisted
-cryptography==2.9.2
+cryptography==3.2
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   adal
@@ -86,7 +86,7 @@ dictdiffer==0.8.1
     # via openshift
 distro==1.5.0
     # via -r /awx_devel/requirements/requirements.in
-django==2.2.20
+django==2.2.24
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   channels
@@ -141,7 +141,7 @@ gitdb==4.0.2
     # via gitpython
 gitpython==3.1.7
     # via -r /awx_devel/requirements/requirements.in
-google-auth==1.11.3
+google-auth==1.35.0
     # via kubernetes
 hiredis==1.0.1
     # via aioredis
@@ -192,7 +192,7 @@ kubernetes==11.0.0
     # via openshift
 lockfile==0.12.2
     # via python-daemon
-lxml==4.5.0
+lxml==4.6.3
     # via xmlsec
 markdown==3.2.1
     # via -r /awx_devel/requirements/requirements.in
@@ -309,7 +309,7 @@ redis==3.4.1
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   django-redis
-requests==2.23.0
+requests==2.26.0
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   adal
@@ -327,7 +327,7 @@ requests-oauthlib==1.3.0
     #   kubernetes
     #   msrest
     #   social-auth-core
-rsa==4.0
+rsa==4.7
     # via google-auth
 ruamel.yaml==0.16.10
     # via openshift
@@ -388,7 +388,9 @@ twisted[tls]==20.3.0
     #   daphne
 txaio==20.12.1
     # via autobahn
-urllib3==1.25.8
+typing-extensions==3.10.0.2
+    # via aiohttp
+urllib3==1.26.5
     # via
     #   kubernetes
     #   requests

requirements/requirements_dev.txt

@@ -1,4 +1,4 @@
-django-debug-toolbar==1.11
+django-debug-toolbar==1.11.1
 django-rest-swagger
 # pprofile - re-add once https://github.com/vpelletier/pprofile/issues/41 is addressed
 ipython==7.21.0