[BB2-1499] bump versions of Django and PyJWT to mediate vulns. (#1037)

CMSgov · Aug 16, 2022 · 03d0c3a · 03d0c3a
1 parent dd60ad6
commit 03d0c3a
Show file tree

Hide file tree

Showing 6 changed files with 14 additions and 14 deletions.
diff --git a/requirements/requirements.dev.txt b/requirements/requirements.dev.txt
@@ -190,9 +190,9 @@ dj-database-url==0.5.0 \
  --hash=sha256:4aeaeb1f573c74835b0686a2b46b85990571159ffc21aa57ecd4d1e1cb334163 \
  --hash=sha256:851785365761ebe4994a921b433062309eb882fedd318e1b0fcecc607ed02da9
  # via -r requirements/requirements.in
-django==3.2.14 \
- --hash=sha256:677182ba8b5b285a4e072f3ac17ceee6aff1b5ce77fd173cc5b6a2d3dc022fcf \
- --hash=sha256:a8681e098fa60f7c33a4b628d6fcd3fe983a0939ff1301ecacac21d0b38bad56
+django==3.2.15 \
+ --hash=sha256:115baf5049d5cf4163e43492cdc7139c306ed6d451e7d3571fe9612903903713 \
+ --hash=sha256:f71934b1a822f14a86c9ac9634053689279cd04ae69cb6ade4a59471b886582b
  # via
  # -r requirements/requirements.in
  # django-axes
@@ -441,9 +441,9 @@ pyflakes==2.4.0 \
  --hash=sha256:05a85c2872edf37a4ed30b0cce2f6093e1d0581f8c19d7393122da7e25b2b24c \
  --hash=sha256:3bb3a3f256f4b7968c9c788781e4ff07dce46bdf12339dcda61053375426ee2e
  # via flake8
-pyjwt==1.6.4 \
- --hash=sha256:30b1380ff43b55441283cc2b2676b755cca45693ae3097325dea01f3d110628c \
- --hash=sha256:4ee413b357d53fd3fb44704577afac88e72e878716116270d722723d65b42176
+pyjwt==2.4.0 \
+ --hash=sha256:72d1d253f32dbd4f5c88eaf1fdc62f3a19f676ccbadb9dbc5d07e951b2b26daf \
+ --hash=sha256:d42908208c699b3b973cbeb01a969ba6a96c821eefb1c5bfe4c390c01d67abba
  # via -r requirements/requirements.in
 pyrsistent==0.17.3 \
  --hash=sha256:2e636185d9eb976a18a8a8e96efce62f2905fea90041958d8cc2a189756ebf3e

diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -1,5 +1,5 @@
 # base packages
-django==3.2.14
+django==3.2.15
 django-getenv
 django-bootstrap-form
 django-cors-headers
@@ -21,7 +21,7 @@ requests_oauthlib
 pytz
 configparser==3.5.0
 dj-database-url
-pyjwt==1.6.4
+pyjwt==2.4.0
 newrelic==7.16.0.178
 psycopg2-binary==2.9.3
 sqlparse

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -121,9 +121,9 @@ dj-database-url==0.5.0 \
  --hash=sha256:4aeaeb1f573c74835b0686a2b46b85990571159ffc21aa57ecd4d1e1cb334163 \
  --hash=sha256:851785365761ebe4994a921b433062309eb882fedd318e1b0fcecc607ed02da9
  # via -r requirements/requirements.in
-django==3.2.14 \
- --hash=sha256:677182ba8b5b285a4e072f3ac17ceee6aff1b5ce77fd173cc5b6a2d3dc022fcf \
- --hash=sha256:a8681e098fa60f7c33a4b628d6fcd3fe983a0939ff1301ecacac21d0b38bad56
+django==3.2.15 \
+ --hash=sha256:115baf5049d5cf4163e43492cdc7139c306ed6d451e7d3571fe9612903903713 \
+ --hash=sha256:f71934b1a822f14a86c9ac9634053689279cd04ae69cb6ade4a59471b886582b
  # via
  # -r requirements/requirements.in
  # django-axes
@@ -346,9 +346,9 @@ pycparser==2.21 \
  --hash=sha256:8ee45429555515e1f6b185e78100aea234072576aa43ab53aefcae078162fca9 \
  --hash=sha256:e644fdec12f7872f86c58ff790da456218b10f863970249516d60a5eaca77206
  # via cffi
-pyjwt==1.6.4 \
- --hash=sha256:30b1380ff43b55441283cc2b2676b755cca45693ae3097325dea01f3d110628c \
- --hash=sha256:4ee413b357d53fd3fb44704577afac88e72e878716116270d722723d65b42176
+pyjwt==2.4.0 \
+ --hash=sha256:72d1d253f32dbd4f5c88eaf1fdc62f3a19f676ccbadb9dbc5d07e951b2b26daf \
+ --hash=sha256:d42908208c699b3b973cbeb01a969ba6a96c821eefb1c5bfe4c390c01d67abba
  # via -r requirements/requirements.in
 pyrsistent==0.17.3 \
  --hash=sha256:2e636185d9eb976a18a8a8e96efce62f2905fea90041958d8cc2a189756ebf3e

diff --git a/vendor/Django-3.2.14-py3-none-any.whl → vendor/Django-3.2.15-py3-none-any.whl b/vendor/Django-3.2.14-py3-none-any.whl → vendor/Django-3.2.15-py3-none-any.whl
diff --git a/vendor/PyJWT-1.6.4-py2.py3-none-any.whl b/vendor/PyJWT-1.6.4-py2.py3-none-any.whl
diff --git a/vendor/PyJWT-2.4.0-py3-none-any.whl b/vendor/PyJWT-2.4.0-py3-none-any.whl