bump django to 2.2.28 to mediate CVE-2022-28346 and CVE-2022-28347 SQ…

…L inject. (#1019)
CMSgov · Apr 12, 2022 · 926ba83 · 926ba83
1 parent 6473ad5
commit 926ba83
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 7 deletions.
diff --git a/requirements/requirements.dev.txt b/requirements/requirements.dev.txt
@@ -149,9 +149,9 @@ dj-database-url==0.5.0 \
  --hash=sha256:4aeaeb1f573c74835b0686a2b46b85990571159ffc21aa57ecd4d1e1cb334163 \
  --hash=sha256:851785365761ebe4994a921b433062309eb882fedd318e1b0fcecc607ed02da9
  # via -r requirements/requirements.in
-django==2.2.27 \
- --hash=sha256:1ee37046b0bf2b61e83b3a01d067323516ec3b6f2b17cd49b1326dd4ba9dc913 \
- --hash=sha256:90763c764738586b11d7e1f44828032c153366e43ad7f782908193a1bb2d6d92
+django==2.2.28 \
+ --hash=sha256:0200b657afbf1bc08003845ddda053c7641b9b24951e52acd51f6abda33a7413 \
+ --hash=sha256:365429d07c1336eb42ba15aa79f45e1c13a0b04d5c21569e7d596696418a6a45
  # via
  # -r requirements/requirements.in
  # django-bootstrap-form

diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -1,5 +1,5 @@
 # base packages
-django==2.2.27
+django==2.2.28
 django-getenv
 django-bootstrap-form
 django-cors-headers==3.6.0

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -35,9 +35,9 @@ dj-database-url==0.5.0 \
  --hash=sha256:4aeaeb1f573c74835b0686a2b46b85990571159ffc21aa57ecd4d1e1cb334163 \
  --hash=sha256:851785365761ebe4994a921b433062309eb882fedd318e1b0fcecc607ed02da9
  # via -r requirements/requirements.in
-django==2.2.27 \
- --hash=sha256:1ee37046b0bf2b61e83b3a01d067323516ec3b6f2b17cd49b1326dd4ba9dc913 \
- --hash=sha256:90763c764738586b11d7e1f44828032c153366e43ad7f782908193a1bb2d6d92
+django==2.2.28 \
+ --hash=sha256:0200b657afbf1bc08003845ddda053c7641b9b24951e52acd51f6abda33a7413 \
+ --hash=sha256:365429d07c1336eb42ba15aa79f45e1c13a0b04d5c21569e7d596696418a6a45
  # via
  # -r requirements/requirements.in
  # django-bootstrap-form

diff --git a/vendor/Django-2.2.27-py3-none-any.whl → vendor/Django-2.2.28-py3-none-any.whl b/vendor/Django-2.2.27-py3-none-any.whl → vendor/Django-2.2.28-py3-none-any.whl