From 6bae8d1a789c44ac4a162ae20fad592e135e9725 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 5 Dec 2025 21:47:33 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-14157807 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-14157810 - https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-14157217 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 155e5c6766..ca8bc3a5b1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,7 +9,7 @@ celery>=5.2.6 coverage>=4.5.4,<5.0 # Coverage 5.x moves from a json database to SQLite. Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views decorator>=5.1.1 defusedxml>=0.7.1 # for TastyPie when using xml; not a declared dependency -Django>=2.2.28,<3.0 +Django>=4.2.27 django-analytical>=3.1.0 django-bootstrap5>=21.3 django-celery-beat>=2.3.0 @@ -66,3 +66,4 @@ Unidecode>=1.3.4 weasyprint>=52.5,<53 # Datatracker tests past on 54, but xml2rfc tests do not. xml2rfc>=3.12.4 xym>=0.6,<1.0 +sqlparse>=0.5.4 # not directly required, pinned by Snyk to avoid a vulnerability