External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-09 23:12:08 -03:30
Code Issues Packages Projects Releases Wiki Activity

Upgrade django and sqlparse to pickup CVE fixes (#6709)

Browse Source
This commit is contained in:
Tomas Z 2024-10-04 21:51:12 +02:00 committed by GitHub
parent 534b0209f4
commit d1c85dae4d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
requirements/requirements.in
View File

@ -13,7 +13,7 @@ cryptography>=41.0.7 # CVE-2023-49083
Cython<3 # due to https://github.com/yaml/pyyaml/pull/702
daphne
distro
django==4.2.15 # CVE-2024-41991
django==4.2.16 # CVE-2024-45230
django-auth-ldap
django-cors-headers
django-crum
@ -59,7 +59,7 @@ pyzstd # otel collector log file compression library
receptorctl==1.4.8
social-auth-core == 4.5.4 # hard pinned due to resolver picking CVE version when uncapped
social-auth-app-django==5.4.2 # see UPGRADE BLOCKERs
sqlparse>=0.4.4 # Required by django https://github.com/ansible/awx/security/dependabot/96
sqlparse==0.5.0 # CVE-2024-4340
redis[hiredis]
requests
slack-sdk

4
requirements/requirements.txt
View File

@ -125,7 +125,7 @@ deprecated==1.2.14
# opentelemetry-exporter-otlp-proto-http
distro==1.9.0
# via -r /awx_devel/requirements/requirements.in
django==4.2.15
django==4.2.16
# via
# -r /awx_devel/requirements/requirements.in
# channels
@ -508,7 +508,7 @@ social-auth-core==4.5.4
# via
# -r /awx_devel/requirements/requirements.in
# social-auth-app-django
sqlparse==0.4.4
sqlparse==0.5.0
# via
# -r /awx_devel/requirements/requirements.in
# django