1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 19:26:48 +00:00

build(deps): idna, requests and urllib3 above their advisories

django-bootstrap-icons (template tags; it downloads an icon missing from
static/icon_cache) and websockify depend on requests, unpinned. On a
host that already has python3-requests, the installer's venv kept the
distro's idna, requests and urllib3 (Rocky 10: idna 3.7, urllib3
1.26.19; Ubuntu 24.04: idna 3.6, requests 2.31.0, urllib3 2.0.7), all
with advisories, and the panel loads them with its templates. Checked
in fresh Rocky 10 and Ubuntu 24.04 containers with python3-requests
installed first: all three come from the venv.
This commit is contained in:
catborise 2026-10-11 22:21:50 +03:00
parent 3be3b4b2cc
commit 9030b910f5

View file

@ -7,6 +7,11 @@ django-auth-ldap==5.3.0
# the installer's venv can otherwise keep older distro copies (openSUSE 15.6)
python-ldap>=3.4.5
pyasn1>=0.6.4
# for django-bootstrap-icons and websockify; a host's python3-requests would
# otherwise bring idna, requests and urllib3 with advisories
idna>=3.15
requests>=2.33.0
urllib3>=2.8.0
django-axes==8.3.1
djangorestframework==3.18.3
drf-nested-routers==0.95.3