Merge pull request #176 from mila-iqia/fix-vulnerabilities

Fix vulnerabilities

These updates should fix:
• https://github.com/mila-iqia/clockwork/security/dependabot/1
• https://github.com/mila-iqia/clockwork/security/dependabot/2
• https://github.com/mila-iqia/clockwork/security/dependabot/3
• https://github.com/mila-iqia/clockwork/security/dependabot/4
• https://github.com/mila-iqia/clockwork/security/dependabot/14
• https://github.com/mila-iqia/clockwork/security/dependabot/15
• https://github.com/mila-iqia/clockwork/security/dependabot/16
• https://github.com/mila-iqia/clockwork/security/dependabot/17

clockwork_tools/pyproject.toml

@@ -9,7 +9,8 @@ license = "MIT"
 
 [tool.poetry.dependencies]
 python = "^3.9"
-requests = "^2.27.1"
+requests = "^2.31.0"
+urllib3 = "^1.26.17"
 
 [tool.poetry.dev-dependencies]
 

clockwork_web/requirements.txt

@@ -1,14 +1,13 @@
-Babel==2.13.0
-blinker==1.6.3
+Babel==2.13.1
+blinker==1.7.0
 certifi==2023.7.22
-charset-normalizer==3.3.0
+charset-normalizer==3.3.2
 click==8.1.7
 dnspython==2.4.2
 Flask==3.0.0
 flask-babel==4.0.0
-Flask-Login @ git+https://github.com/maxcountryman/flask-login.git@2204b4eee7b215977ba5a1bf85e2061f7fa65e20
+Flask-Login @ git+https://github.com/maxcountryman/flask-login.git@ea80968c10f3d521ea4983652f183aa42e2f44fc
 idna==3.4
-importlib-metadata==6.8.0
 itsdangerous==2.1.2
 Jinja2==3.1.2
 MarkupSafe==2.1.3
@@ -19,5 +18,4 @@ requests==2.31.0
 sentry-sdk==1.32.0
 toml==0.10.2
 urllib3==2.0.7
-Werkzeug==3.0.0
-zipp==3.17.0
+Werkzeug==3.0.1

clockwork_web/requirements_orig.txt

@@ -6,4 +6,4 @@ pymongo==4.5.0
 requests==2.31.0
 sentry-sdk==1.32.0
 toml==0.10.2
-Werkzeug==3.0.0
+Werkzeug==3.0.1

scripts/requirements.txt

@@ -1,4 +1,4 @@
-blinker==1.6.3
+blinker==1.7.0
 click==8.1.7
 dnspython==2.4.2
 Flask==3.0.0
@@ -8,4 +8,4 @@ ldap3==2.9.1
 MarkupSafe==2.1.3
 pyasn1==0.5.0
 pymongo==4.5.0
-Werkzeug==3.0.0
+Werkzeug==3.0.1

scripts/requirements_orig.txt

@@ -1,4 +1,4 @@
 Flask==3.0.0
 ldap3==2.9.1
 pymongo==4.5.0
-Werkzeug==3.0.0
+Werkzeug==3.0.1