From 7efb1d7ad0be911545b863e3c5ab94ba39269cfe Mon Sep 17 00:00:00 2001 From: Kelvin Muchiri Date: Thu, 14 Nov 2024 14:48:01 +0300 Subject: [PATCH 1/3] bump security --- docker/onadata-uwsgi/Dockerfile.ubuntu | 2 +- requirements/azure.in | 2 +- requirements/azure.pip | 2 +- requirements/base.pip | 4 ++-- setup.cfg | 4 ++-- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/docker/onadata-uwsgi/Dockerfile.ubuntu b/docker/onadata-uwsgi/Dockerfile.ubuntu index d079611aa5..178b5c409a 100644 --- a/docker/onadata-uwsgi/Dockerfile.ubuntu +++ b/docker/onadata-uwsgi/Dockerfile.ubuntu @@ -58,7 +58,7 @@ RUN python -m pip install --no-cache-dir -r requirements/docs.pip && \ make -C docs html -FROM debian:bookworm-20240812 as runtime +FROM debian:bookworm-20241016 as runtime ENV DEBIAN_FRONTEND=noninteractive diff --git a/requirements/azure.in b/requirements/azure.in index f56fa03d76..6e82e1efc2 100644 --- a/requirements/azure.in +++ b/requirements/azure.in @@ -1,3 +1,3 @@ -cryptography>=39.0.1 +cryptography>=43.0.1 django>=4.2.16,<5 django-storages[azure] diff --git a/requirements/azure.pip b/requirements/azure.pip index 8beab6b322..0806815551 100644 --- a/requirements/azure.pip +++ b/requirements/azure.pip @@ -18,7 +18,7 @@ cffi==1.16.0 # via cryptography charset-normalizer==3.3.2 # via requests -cryptography==42.0.8 +cryptography==43.0.1 # via # -r requirements/azure.in # azure-storage-blob diff --git a/requirements/base.pip b/requirements/base.pip index bb393cf205..4143730578 100644 --- a/requirements/base.pip +++ b/requirements/base.pip @@ -66,7 +66,7 @@ click-plugins==1.1.1 # via celery click-repl==0.3.0 # via celery -cryptography==42.0.8 +cryptography==43.0.1 # via # jwcrypto # onadata @@ -328,7 +328,7 @@ rsa==4.9 # via google-auth s3transfer==0.10.2 # via boto3 -sentry-sdk==1.45.0 +sentry-sdk==2.8.0 # via onadata simplejson==3.19.2 # via onadata diff --git a/setup.cfg b/setup.cfg index 418c8a7ed9..498e07876f 100644 --- a/setup.cfg +++ b/setup.cfg @@ -90,9 +90,9 @@ install_requires = simplejson uwsgi django-activity-stream - sentry-sdk>=1.43.0,<2 + sentry-sdk>=2.8,<3 paho-mqtt - cryptography>=39.0.1 + cryptography>=43.0.1 #Monitoring analytics-python appoptics-metrics From 3561b126c9063591cb473b592146181c2d3b5acf Mon Sep 17 00:00:00 2001 From: Kelvin Muchiri Date: Thu, 14 Nov 2024 16:42:15 +0300 Subject: [PATCH 2/3] update dependency --- requirements/dev.pip | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/dev.pip b/requirements/dev.pip index 4a58862e63..85f4a092ba 100644 --- a/requirements/dev.pip +++ b/requirements/dev.pip @@ -467,7 +467,7 @@ s3transfer==0.10.2 # via boto3 semver==3.0.2 # via requirements-detector -sentry-sdk==1.45.0 +sentry-sdk===2.8.0 # via onadata setoptconf-tmp==0.3.1 # via prospector From b0b1bd00f9779f66c2fd54a3a841b1675df50fe1 Mon Sep 17 00:00:00 2001 From: Kelvin Muchiri Date: Thu, 14 Nov 2024 16:43:56 +0300 Subject: [PATCH 3/3] remove extra = --- requirements/dev.pip | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/dev.pip b/requirements/dev.pip index 85f4a092ba..8f0dc53e7a 100644 --- a/requirements/dev.pip +++ b/requirements/dev.pip @@ -467,7 +467,7 @@ s3transfer==0.10.2 # via boto3 semver==3.0.2 # via requirements-detector -sentry-sdk===2.8.0 +sentry-sdk==2.8.0 # via onadata setoptconf-tmp==0.3.1 # via prospector