DevOps

DevOps copied to clipboard

Bumps [twisted](https://github.com/twisted/twisted) from 18.7.0 to 22.4.0. Release notes Sourced from twisted's releases. Twisted 22.4.0 (2022-04-11) Features twisted.python.failure.Failure tracebacks now capture module information, improving compatibility with the Raven Sentry client. (#7796)...

dependabot[bot]

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.6.4 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...

dependabot[bot]

Bumps [paramiko](https://github.com/paramiko/paramiko) from 2.4.2 to 2.10.1. Commits 286bd9f Cut 2.10.1 4c491e2 Fix CVE re: PKey.write_private_key chmod race aa3cc6f Cut 2.10.0 e50e19f Fix up changelog entry with real links 02ad67e Helps...

dependabot[bot]

Bumps [pillow](https://github.com/python-pillow/Pillow) from 5.2.0 to 9.0.1. Release notes Sourced from pillow's releases. 9.0.1 https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html Changes In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [@​radarhere, @​hugovk] Restrict builtins within...

dependabot[bot]

Bumps [celery](https://github.com/celery/celery) from 4.2.1 to 5.2.2. Release notes Sourced from celery's releases. 5.2.2 Release date: 2021-12-26 16:30 P.M UTC+2:00 Release by: Omer Katz Various documentation fixes. Fix CVE-2021-23727 (Stored Command...

dependabot[bot]

Bumps [python-ldap](https://github.com/python-ldap/python-ldap) from 3.1.0 to 3.4.0. Release notes Sourced from python-ldap's releases. 3.4.0 This release requires Python 3.6 or above, and is tested with Python 3.6 to 3.10. Python 2...

dependabot[bot]

Bumps [ansible](https://github.com/ansible/ansible) from 2.6.4 to 4.2.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [django](https://github.com/django/django) from 2.0.5 to 2.2.24. Commits 2da029d [2.2.x] Bumped version for 2.2.24 release. f27c38a [2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses. 053cc95 [2.2.x] Fixed CVE-2021-33203 --...

dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.23 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependabot[bot]

Bumps [autobahn](https://github.com/crossbario/autobahn-python) from 18.9.2 to 20.12.3. Changelog Sourced from autobahn's changelog. 20.12.3 fix: URL must be re-encoded when doing redirect (#1439) fix: update and migrate CI/CD pipeline to GitHub Actions...

dependabot[bot]