From 01645ff1df0a6545bdb2a15378a83ede23029a98 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Sep 2024 00:27:35 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886958 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886959 - https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-7856105 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index e3f5eab7e..1561a54c1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -48,7 +48,7 @@ django-rest-auth==0.9.5 # Newer version break and need to be tested pronto==0.12.2 # pyup: ignore -Django==2.2.14 # pyup: ignore +Django==4.2.16 # pyup: ignore django-phonenumber-field==2.3.1 # pyup: ignore @@ -90,7 +90,7 @@ safety==1.8.5 ## PRODUCTION PACKAGES ## ############################### -gunicorn==20.0.3 +gunicorn==21.2.0 psycopg2==2.8.3 sentry-sdk==0.13.3 sphinx-server==0.1.0