Merge pull request #54 from onaio/security-fixes-27052024

May dependency updates
onaio · Jun 10, 2024 · f4543eb · f4543eb
2 parents c4f5efa + 911bd7a
commit f4543eb
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 33 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -4,7 +4,7 @@ ENV VIRTUAL_ENV=/opt/venv
 
 RUN python -m venv "$VIRTUAL_ENV"
 ENV PATH="$VIRTUAL_ENV/bin:$PATH"
-RUN pip install --quiet pip==24.0 setuptools==69.5.1 && \
+RUN pip install --quiet pip==24.0 setuptools==70.0.0 && \
     pip install --quiet pip-tools
 COPY ./dependencies/pip/external_services.txt "/tmp/pip_dependencies.txt"
 RUN pip-sync "/tmp/pip_dependencies.txt" 1>/dev/null

diff --git a/dependencies/pip/external_services.txt b/dependencies/pip/external_services.txt
@@ -1,5 +1,5 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile --output-file=dependencies/pip/external_services.txt --strip-extras dependencies/pip/external_services.in
@@ -31,19 +31,19 @@ attrs==23.2.0
     #   referencing
 azure-core==1.30.1
     # via azure-storage-blob
-azure-storage-blob==12.19.1
+azure-storage-blob==12.20.0
     # via django-storages
 begins==0.9
     # via formpack
 billiard==4.2.0
     # via
     #   -r dependencies/pip/requirements.in
     #   celery
-boto3==1.34.88
+boto3==1.34.113
     # via
     #   django-amazon-ses
     #   django-storages
-botocore==1.34.88
+botocore==1.34.113
     # via
     #   boto3
     #   s3transfer
@@ -71,7 +71,7 @@ click-plugins==1.1.1
     # via celery
 click-repl==0.3.0
     # via celery
-cryptography==42.0.5
+cryptography==42.0.7
     # via
     #   azure-storage-blob
     #   jwcrypto
@@ -174,7 +174,7 @@ djangorestframework==3.13.1
     #   drf-extensions
 djangorestframework-xml==2.0.0
     # via -r dependencies/pip/requirements.in
-docutils==0.21.1
+docutils==0.21.2
     # via statistics
 drf-extensions==0.7.1
     # via -r dependencies/pip/requirements.in
@@ -202,7 +202,7 @@ jmespath==1.0.1
     #   botocore
 jsonfield==3.1.0
     # via -r dependencies/pip/requirements.in
-jsonschema==4.21.1
+jsonschema==4.22.0
     # via formpack
 jsonschema-specifications==2023.12.1
     # via jsonschema
@@ -212,7 +212,7 @@ kombu==5.3.7
     # via
     #   -r dependencies/pip/requirements.in
     #   celery
-lxml==5.2.1
+lxml==5.2.2
     # via
     #   -r dependencies/pip/requirements.in
     #   formpack
@@ -253,7 +253,7 @@ pyasn1==0.6.0
     #   ndg-httpsclient
 pycparser==2.22
     # via cffi
-pygments==2.17.2
+pygments==2.18.0
     # via -r dependencies/pip/requirements.in
 pyjwt==2.8.0
     # via
@@ -269,7 +269,7 @@ pyotp==2.9.0
     # via django-trench
 pyquery==2.0.0
     # via formpack
-python-crontab==3.0.0
+python-crontab==3.1.0
     # via django-celery-beat
 python-dateutil==2.9.0.post0
     # via
@@ -288,16 +288,16 @@ pyxform==1.9.0
     #   formpack
 pyyaml==6.0.1
     # via responses
-redis==5.0.3
+redis==5.0.4
     # via
     #   celery
     #   django-redis
     #   django-redis-sessions
-referencing==0.34.0
+referencing==0.35.1
     # via
     #   jsonschema
     #   jsonschema-specifications
-requests==2.31.0
+requests==2.32.2
     # via
     #   -r dependencies/pip/requirements.in
     #   azure-core
@@ -308,7 +308,7 @@ requests==2.31.0
     #   yubico-client
 responses==0.25.0
     # via -r dependencies/pip/requirements.in
-rpds-py==0.18.0
+rpds-py==0.18.1
     # via
     #   jsonschema
     #   referencing
@@ -338,9 +338,9 @@ statistics==1.0.3.5
     # via formpack
 tabulate==0.9.0
     # via -r dependencies/pip/requirements.in
-twilio==9.0.5
+twilio==9.1.0
     # via django-trench
-typing-extensions==4.11.0
+typing-extensions==4.12.0
     # via
     #   azure-core
     #   azure-storage-blob

diff --git a/dependencies/pip/requirements.txt b/dependencies/pip/requirements.txt
@@ -1,5 +1,5 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile --output-file=dependencies/pip/requirements.txt --strip-extras dependencies/pip/requirements.in
@@ -31,19 +31,19 @@ attrs==23.2.0
     #   referencing
 azure-core==1.30.1
     # via azure-storage-blob
-azure-storage-blob==12.19.1
+azure-storage-blob==12.20.0
     # via django-storages
 begins==0.9
     # via formpack
 billiard==4.2.0
     # via
     #   -r dependencies/pip/requirements.in
     #   celery
-boto3==1.34.88
+boto3==1.34.113
     # via
     #   django-amazon-ses
     #   django-storages
-botocore==1.34.88
+botocore==1.34.113
     # via
     #   boto3
     #   s3transfer
@@ -69,7 +69,7 @@ click-plugins==1.1.1
     # via celery
 click-repl==0.3.0
     # via celery
-cryptography==42.0.5
+cryptography==42.0.7
     # via
     #   azure-storage-blob
     #   jwcrypto
@@ -172,7 +172,7 @@ djangorestframework==3.13.1
     #   drf-extensions
 djangorestframework-xml==2.0.0
     # via -r dependencies/pip/requirements.in
-docutils==0.21.1
+docutils==0.21.2
     # via statistics
 drf-extensions==0.7.1
     # via -r dependencies/pip/requirements.in
@@ -200,7 +200,7 @@ jmespath==1.0.1
     #   botocore
 jsonfield==3.1.0
     # via -r dependencies/pip/requirements.in
-jsonschema==4.21.1
+jsonschema==4.22.0
     # via formpack
 jsonschema-specifications==2023.12.1
     # via jsonschema
@@ -210,7 +210,7 @@ kombu==5.3.7
     # via
     #   -r dependencies/pip/requirements.in
     #   celery
-lxml==5.2.1
+lxml==5.2.2
     # via
     #   -r dependencies/pip/requirements.in
     #   formpack
@@ -251,7 +251,7 @@ pyasn1==0.6.0
     #   ndg-httpsclient
 pycparser==2.22
     # via cffi
-pygments==2.17.2
+pygments==2.18.0
     # via -r dependencies/pip/requirements.in
 pyjwt==2.8.0
     # via
@@ -267,7 +267,7 @@ pyotp==2.9.0
     # via django-trench
 pyquery==2.0.0
     # via formpack
-python-crontab==3.0.0
+python-crontab==3.1.0
     # via django-celery-beat
 python-dateutil==2.9.0.post0
     # via
@@ -286,16 +286,16 @@ pyxform==1.9.0
     #   formpack
 pyyaml==6.0.1
     # via responses
-redis==5.0.3
+redis==5.0.4
     # via
     #   celery
     #   django-redis
     #   django-redis-sessions
-referencing==0.34.0
+referencing==0.35.1
     # via
     #   jsonschema
     #   jsonschema-specifications
-requests==2.31.0
+requests==2.32.2
     # via
     #   -r dependencies/pip/requirements.in
     #   azure-core
@@ -306,7 +306,7 @@ requests==2.31.0
     #   yubico-client
 responses==0.25.0
     # via -r dependencies/pip/requirements.in
-rpds-py==0.18.0
+rpds-py==0.18.1
     # via
     #   jsonschema
     #   referencing
@@ -334,9 +334,9 @@ statistics==1.0.3.5
     # via formpack
 tabulate==0.9.0
     # via -r dependencies/pip/requirements.in
-twilio==9.0.5
+twilio==9.1.0
     # via django-trench
-typing-extensions==4.11.0
+typing-extensions==4.12.0
     # via
     #   azure-core
     #   azure-storage-blob