Skip to content

Bump + comment out dependencies to address vulnerabilities#746

Merged
matthew-li merged 3 commits intodevelopfrom
upgrade-dependencies
Apr 10, 2026
Merged

Bump + comment out dependencies to address vulnerabilities#746
matthew-li merged 3 commits intodevelopfrom
upgrade-dependencies

Conversation

@matthew-li
Copy link
Copy Markdown
Collaborator

@matthew-li matthew-li commented Apr 10, 2026

Description

**** Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. ****

  • Upgraded the following to address security vulnerabilities flagged by Dependabot:
    • Django: 5.2.12 --> 5.2.13
    • django-allauth: 65.10.0 --> 65.13.0
    • requests: 2.32.4 --> 2.33.0
    • sqlparse: 0.5.3 --> 0.5.4
    • urllib3: 2.6.0 --> 2.6.3
  • Commented out python-ldap from the unused ldap_user_search plugin's requirements.

Type of change

**** Please delete options that are not relevant. ****

  • Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

**** Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration. ****

  • Ensure that the test suite passes.

PR Self Evaluation

Strikethrough things that don’t make sense for your PR.

  • My code follows the agreed upon best practices
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation (if needed)
  • My changes generate no new warnings
  • Any dependent changes have been merged and published in the appropriate modules
  • I have performed a self-review of my own code

@matthew-li matthew-li merged commit 9f92d3a into develop Apr 10, 2026
1 check passed
@matthew-li matthew-li deleted the upgrade-dependencies branch April 10, 2026 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant