mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-02 17:31:14 -05:00
Bump Celery to latest version
This brings in the version 5.2.1 of Kombu, which fixes a security
vulnerability:
> Celery 5.2.0 includes 'kombu' v5.2.1, which includes dependencies
> updates that resolve security issues.
— https://pyup.io/repos/github/alphagov/notifications-api/commits/?page=1#b654c27699a5164cbbe50e042d5d34141f560255
This is the commit from Kombu:
f3b04558fa
I believe the dependency of Kombu which has issues is urllib3, which
has two open advisories for versions less than 1.26.5:
- https://github.com/urllib3/urllib3/security/advisories/GHSA-q2q7-5pp4-w6pg
- https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r
This commit is contained in:
@@ -2,7 +2,7 @@
|
|||||||
# with package version changes made in requirements-app.txt
|
# with package version changes made in requirements-app.txt
|
||||||
|
|
||||||
cffi==1.14.5
|
cffi==1.14.5
|
||||||
celery[sqs]==5.1.2
|
celery[sqs]==5.2.0
|
||||||
docopt==0.6.2
|
docopt==0.6.2
|
||||||
Flask-Bcrypt==0.7.1
|
Flask-Bcrypt==0.7.1
|
||||||
flask-marshmallow==0.14.0
|
flask-marshmallow==0.14.0
|
||||||
|
|||||||
@@ -27,9 +27,7 @@ bleach==4.1.0
|
|||||||
blinker==1.4
|
blinker==1.4
|
||||||
# via gds-metrics
|
# via gds-metrics
|
||||||
boto3==1.19.4
|
boto3==1.19.4
|
||||||
# via
|
# via notifications-utils
|
||||||
# celery
|
|
||||||
# notifications-utils
|
|
||||||
botocore==1.22.4
|
botocore==1.22.4
|
||||||
# via
|
# via
|
||||||
# awscli
|
# awscli
|
||||||
@@ -39,7 +37,7 @@ cachetools==4.2.1
|
|||||||
# via
|
# via
|
||||||
# -r requirements.in
|
# -r requirements.in
|
||||||
# notifications-utils
|
# notifications-utils
|
||||||
celery[sqs]==5.1.2
|
celery[sqs]==5.2.0
|
||||||
# via -r requirements.in
|
# via -r requirements.in
|
||||||
certifi==2021.10.8
|
certifi==2021.10.8
|
||||||
# via requests
|
# via requests
|
||||||
@@ -50,7 +48,7 @@ cffi==1.14.5
|
|||||||
# cryptography
|
# cryptography
|
||||||
charset-normalizer==2.0.7
|
charset-normalizer==2.0.7
|
||||||
# via requests
|
# via requests
|
||||||
click==7.1.2
|
click==8.0.3
|
||||||
# via
|
# via
|
||||||
# celery
|
# celery
|
||||||
# click-datetime
|
# click-datetime
|
||||||
@@ -132,7 +130,7 @@ jmespath==0.10.0
|
|||||||
# botocore
|
# botocore
|
||||||
jsonschema==3.2.0
|
jsonschema==3.2.0
|
||||||
# via -r requirements.in
|
# via -r requirements.in
|
||||||
kombu==5.1.0
|
kombu==5.2.1
|
||||||
# via celery
|
# via celery
|
||||||
lxml==4.6.3
|
lxml==4.6.3
|
||||||
# via -r requirements.in
|
# via -r requirements.in
|
||||||
@@ -173,8 +171,6 @@ pyasn1==0.4.8
|
|||||||
# via rsa
|
# via rsa
|
||||||
pycparser==2.20
|
pycparser==2.20
|
||||||
# via cffi
|
# via cffi
|
||||||
pycurl==7.43.0.5
|
|
||||||
# via celery
|
|
||||||
pyjwt==2.0.1
|
pyjwt==2.0.1
|
||||||
# via
|
# via
|
||||||
# -r requirements.in
|
# -r requirements.in
|
||||||
|
|||||||
Reference in New Issue
Block a user