From a81eb79e51d580e84217ffba608bec538c25883c Mon Sep 17 00:00:00 2001
From: catborise <catborise@gmail.com>
Date: Thu, 5 Nov 2026 12:09:16 +0300
Subject: [PATCH] chore(deps): django-otp 1.7.5, paramiko 5.1.0,
 python-socketio 5.18.1, python-engineio 4.15.1

The updates on the login, SSH and serial console paths:
- django-otp 1.7.5 revokes the session of a device that is no longer
  confirmed.
- python-engineio 4.15.1 and python-socketio 5.18.1 refuse requests and
  events before the connection completes, HTTP requests after the
  upgrade to WebSocket, and ../ in static file paths.
- paramiko 5.1.0 fixes agent keys and the default RSA signature
  algorithm.

django-rest-knox 5.1.1 changes only its project's references, and
django-auth-ldap 5.4.0 drops Python 3.10, which the panel supports;
both stay.
---
 conf/requirements.txt | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/conf/requirements.txt b/conf/requirements.txt
index c0f4df70..62361dca 100644
--- a/conf/requirements.txt
+++ b/conf/requirements.txt
@@ -1,6 +1,6 @@
 Django==5.2.18
 django_bootstrap5==26.3
-django-otp==1.7.4
+django-otp==1.7.5
 # for websockify; a host's python3-requests would
 # otherwise bring idna, requests and urllib3 with advisories
 idna>=3.15
@@ -15,11 +15,11 @@ gunicorn==26.2.0
 libvirt-python>=9.0.0
 lxml>=6.1
 openpyxl==3.1.5
-paramiko==5.0.0
+paramiko==5.1.0
 psycopg[binary]==3.3.6
 pycdlib==1.22.0
-python-engineio==4.14.0
-python-socketio==5.17.0
+python-engineio==4.15.1
+python-socketio==5.18.1
 segno==1.6.6
 websockify==0.13.0
 whitenoise==6.12.0