chore: update Django to 4.2.19 for Sumac - Security Patch (#36234)

* chore: upgrade Django to 4.2.19 * chore: compile requirements
openedx · Feb 12, 2025 · 94d5c88 · 94d5c88
1 parent 59cb8f0
commit 94d5c88
Show file tree

Hide file tree

Showing 10 changed files with 22 additions and 8 deletions.
diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt
@@ -28,3 +28,7 @@ elasticsearch<7.14.0
 # Cause: https://github.com/openedx/edx-lint/issues/458
 # This can be unpinned once https://github.com/openedx/edx-lint/issues/459 has been resolved.
 pip<24.3
+
+# Cause: https://github.com/openedx/edx-lint/issues/475
+# This can be unpinned once https://github.com/openedx/edx-lint/issues/476 has been resolved.
+urllib3<2.3.0
diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt
@@ -170,7 +170,7 @@ defusedxml==0.7.1
     #   ora2
     #   python3-openid
     #   social-auth-core
-django==4.2.17
+django==4.2.19
     # via
     #   -c requirements/edx/../common_constraints.txt
     #   -c requirements/edx/../constraints.txt
@@ -1236,6 +1236,7 @@ uritemplate==4.1.1
     #   google-api-python-client
 urllib3==2.2.3
     # via
+    #   -c requirements/edx/../common_constraints.txt
     #   -r requirements/edx/paver.txt
     #   botocore
     #   elasticsearch

diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt
@@ -337,7 +337,7 @@ distlib==0.3.9
     # via
     #   -r requirements/edx/testing.txt
     #   virtualenv
-django==4.2.17
+django==4.2.19
     # via
     #   -c requirements/edx/../common_constraints.txt
     #   -c requirements/edx/../constraints.txt
@@ -2180,6 +2180,7 @@ uritemplate==4.1.1
     #   google-api-python-client
 urllib3==2.2.3
     # via
+    #   -c requirements/edx/../common_constraints.txt
     #   -r requirements/edx/doc.txt
     #   -r requirements/edx/testing.txt
     #   botocore

diff --git a/requirements/edx/doc.txt b/requirements/edx/doc.txt
@@ -227,7 +227,7 @@ defusedxml==0.7.1
     #   ora2
     #   python3-openid
     #   social-auth-core
-django==4.2.17
+django==4.2.19
     # via
     #   -c requirements/edx/../common_constraints.txt
     #   -c requirements/edx/../constraints.txt
@@ -1531,6 +1531,7 @@ uritemplate==4.1.1
     #   google-api-python-client
 urllib3==2.2.3
     # via
+    #   -c requirements/edx/../common_constraints.txt
     #   -r requirements/edx/base.txt
     #   botocore
     #   elasticsearch

diff --git a/requirements/edx/paver.txt b/requirements/edx/paver.txt
@@ -58,7 +58,9 @@ stevedore==5.3.0
 typing-extensions==4.12.2
     # via edx-opaque-keys
 urllib3==2.2.3
-    # via requests
+    # via
+    #   -c requirements/edx/../common_constraints.txt
+    #   requests
 watchdog==5.0.3
     # via -r requirements/edx/paver.in
 wrapt==1.16.0

diff --git a/requirements/edx/semgrep.txt b/requirements/edx/semgrep.txt
@@ -126,6 +126,7 @@ typing-extensions==4.12.2
     #   semgrep
 urllib3==2.2.3
     # via
+    #   -c requirements/edx/../common_constraints.txt
     #   requests
     #   semgrep
 wcmatch==8.5.2

diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt
@@ -253,7 +253,7 @@ dill==0.3.9
     # via pylint
 distlib==0.3.9
     # via virtualenv
-django==4.2.17
+django==4.2.19
     # via
     #   -c requirements/edx/../common_constraints.txt
     #   -c requirements/edx/../constraints.txt
@@ -1614,6 +1614,7 @@ uritemplate==4.1.1
     #   google-api-python-client
 urllib3==2.2.3
     # via
+    #   -c requirements/edx/../common_constraints.txt
     #   -r requirements/edx/base.txt
     #   botocore
     #   elasticsearch

diff --git a/scripts/user_retirement/requirements/base.txt b/scripts/user_retirement/requirements/base.txt
@@ -35,7 +35,7 @@ click==8.1.6
     #   edx-django-utils
 cryptography==43.0.3
     # via pyjwt
-django==4.2.17
+django==4.2.19
     # via
     #   -c scripts/user_retirement/requirements/../../../requirements/common_constraints.txt
     #   -c scripts/user_retirement/requirements/../../../requirements/constraints.txt
@@ -160,6 +160,7 @@ uritemplate==4.1.1
     # via google-api-python-client
 urllib3==1.26.20
     # via
+    #   -c scripts/user_retirement/requirements/../../../requirements/common_constraints.txt
     #   -r scripts/user_retirement/requirements/base.in
     #   botocore
     #   requests

diff --git a/scripts/user_retirement/requirements/testing.txt b/scripts/user_retirement/requirements/testing.txt
@@ -52,7 +52,7 @@ cryptography==43.0.3
     #   pyjwt
 ddt==1.7.2
     # via -r scripts/user_retirement/requirements/testing.in
-django==4.2.17
+django==4.2.19
     # via
     #   -r scripts/user_retirement/requirements/base.txt
     #   django-crum

diff --git a/scripts/xblock/requirements.txt b/scripts/xblock/requirements.txt
@@ -15,4 +15,6 @@ idna==3.10
 requests==2.32.3
     # via -r scripts/xblock/requirements.in
 urllib3==2.2.3
-    # via requests
+    # via
+    #   -c scripts/xblock/../../requirements/common_constraints.txt
+    #   requests