fix CVE-2024-33663 and bring in updates for social-auth-app-django (#6634)

This commit is contained in:
Jake Jackson
2024-08-15 13:32:09 -04:00
committed by GitHub
parent bdf3f81016
commit 467024bc54
5 changed files with 8 additions and 58 deletions

View File

@@ -56,8 +56,8 @@ python-ldap
pyyaml>=6.0.1
pyzstd # otel collector log file compression library
receptorctl
social-auth-core[openidconnect]==4.4.2 # see UPGRADE BLOCKERs
social-auth-app-django==5.4.0 # see UPGRADE BLOCKERs
social-auth-core == 4.5.4 # hard pinned due to resolver picking CVE version when uncapped
social-auth-app-django==5.4.2 # see UPGRADE BLOCKERs
sqlparse>=0.4.4 # Required by django https://github.com/ansible/awx/security/dependabot/96
redis[hiredis]
requests