From 512eac39960222117dffd51908b1dce1dc5806ac Mon Sep 17 00:00:00 2001 From: Matthew Li Date: Fri, 10 Apr 2026 13:40:50 -0700 Subject: [PATCH 1/3] Bump patch versions to fix security vulnerability; uncomment unused plugin dependency --- coldfront/plugins/ldap_user_search/requirements.txt | 2 +- requirements.txt | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/coldfront/plugins/ldap_user_search/requirements.txt b/coldfront/plugins/ldap_user_search/requirements.txt index 7674e87772..a5e698a407 100644 --- a/coldfront/plugins/ldap_user_search/requirements.txt +++ b/coldfront/plugins/ldap_user_search/requirements.txt @@ -1,2 +1,2 @@ ldap3==2.6 -python-ldap==3.2.0 +# python-ldap==3.2.0 diff --git a/requirements.txt b/requirements.txt index 52a4f94167..b4f574625c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,7 +5,7 @@ blessed==1.21.0 chardet==5.2.0 coverage==7.10.1 crispy-bootstrap4==2025.6 -Django==5.2.12 +Django==5.2.13 django-allauth==65.10.0 django-constance==4.3.2 django-crispy-forms==2.4 @@ -57,10 +57,10 @@ redis==6.2.0 requests==2.32.4 sentry-sdk==2.34.1 six==1.17.0 -sqlparse==0.5.3 +sqlparse==0.5.4 structlog==25.5.0 text-unidecode==1.3 tqdm==4.67.1 -urllib3==2.6.0 +urllib3==2.6.3 user-agents==2.2.0 wcwidth==0.2.13 From 2b82e81547c6c4efaf88e987e396edaf50d5c00a Mon Sep 17 00:00:00 2001 From: Matthew Li Date: Fri, 10 Apr 2026 13:48:45 -0700 Subject: [PATCH 2/3] Bump requests --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b4f574625c..e1075317be 100644 --- a/requirements.txt +++ b/requirements.txt @@ -54,7 +54,7 @@ python-dateutil==2.9.0.post0 python-memcached==1.62 pytz==2025.2 redis==6.2.0 -requests==2.32.4 +requests==2.33.0 sentry-sdk==2.34.1 six==1.17.0 sqlparse==0.5.4 From e9ca17fb1472174a68bdb06684651199f355296b Mon Sep 17 00:00:00 2001 From: Matthew Li Date: Fri, 10 Apr 2026 13:57:50 -0700 Subject: [PATCH 3/3] Bump django-allauth minor version --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index e1075317be..185e3bd71e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,7 +6,7 @@ chardet==5.2.0 coverage==7.10.1 crispy-bootstrap4==2025.6 Django==5.2.13 -django-allauth==65.10.0 +django-allauth==65.13.0 django-constance==4.3.2 django-crispy-forms==2.4 django-debug-toolbar==6.0.0