mirror of
https://github.com/ansible/awx.git
synced 2026-05-20 07:17:40 -02:30
fix CVE-2024-33663 and bring in updates for social-auth-app-django (#6634)
This commit is contained in:
@@ -56,8 +56,8 @@ python-ldap
|
||||
pyyaml>=6.0.1
|
||||
pyzstd # otel collector log file compression library
|
||||
receptorctl
|
||||
social-auth-core[openidconnect]==4.4.2 # see UPGRADE BLOCKERs
|
||||
social-auth-app-django==5.4.0 # see UPGRADE BLOCKERs
|
||||
social-auth-core == 4.5.4 # hard pinned due to resolver picking CVE version when uncapped
|
||||
social-auth-app-django==5.4.2 # see UPGRADE BLOCKERs
|
||||
sqlparse>=0.4.4 # Required by django https://github.com/ansible/awx/security/dependabot/96
|
||||
redis[hiredis]
|
||||
requests
|
||||
|
||||
Reference in New Issue
Block a user