Bump Celery to latest version

This brings in the version 5.2.1 of Kombu, which fixes a security
vulnerability:
> Celery 5.2.0 includes 'kombu' v5.2.1, which includes dependencies
> updates that resolve security issues.
— https://pyup.io/repos/github/alphagov/notifications-api/commits/?page=1#b654c27699a5164cbbe50e042d5d34141f560255

This is the commit from Kombu:
f3b04558fa

I believe the dependency of Kombu which has issues is urllib3, which
has two open advisories for versions less than 1.26.5:
- https://github.com/urllib3/urllib3/security/advisories/GHSA-q2q7-5pp4-w6pg
- https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r
This commit is contained in:
Chris Hill-Scott
2021-11-15 11:12:33 +00:00
parent 608ef12573
commit 6c0bda0388
2 changed files with 5 additions and 9 deletions

View File

@@ -2,7 +2,7 @@
# with package version changes made in requirements-app.txt # with package version changes made in requirements-app.txt
cffi==1.14.5 cffi==1.14.5
celery[sqs]==5.1.2 celery[sqs]==5.2.0
docopt==0.6.2 docopt==0.6.2
Flask-Bcrypt==0.7.1 Flask-Bcrypt==0.7.1
flask-marshmallow==0.14.0 flask-marshmallow==0.14.0

View File

@@ -27,9 +27,7 @@ bleach==4.1.0
blinker==1.4 blinker==1.4
# via gds-metrics # via gds-metrics
boto3==1.19.4 boto3==1.19.4
# via # via notifications-utils
# celery
# notifications-utils
botocore==1.22.4 botocore==1.22.4
# via # via
# awscli # awscli
@@ -39,7 +37,7 @@ cachetools==4.2.1
# via # via
# -r requirements.in # -r requirements.in
# notifications-utils # notifications-utils
celery[sqs]==5.1.2 celery[sqs]==5.2.0
# via -r requirements.in # via -r requirements.in
certifi==2021.10.8 certifi==2021.10.8
# via requests # via requests
@@ -50,7 +48,7 @@ cffi==1.14.5
# cryptography # cryptography
charset-normalizer==2.0.7 charset-normalizer==2.0.7
# via requests # via requests
click==7.1.2 click==8.0.3
# via # via
# celery # celery
# click-datetime # click-datetime
@@ -132,7 +130,7 @@ jmespath==0.10.0
# botocore # botocore
jsonschema==3.2.0 jsonschema==3.2.0
# via -r requirements.in # via -r requirements.in
kombu==5.1.0 kombu==5.2.1
# via celery # via celery
lxml==4.6.3 lxml==4.6.3
# via -r requirements.in # via -r requirements.in
@@ -173,8 +171,6 @@ pyasn1==0.4.8
# via rsa # via rsa
pycparser==2.20 pycparser==2.20
# via cffi # via cffi
pycurl==7.43.0.5
# via celery
pyjwt==2.0.1 pyjwt==2.0.1
# via # via
# -r requirements.in # -r requirements.in