Bump bleach from 4.1.0 to 6.2.0

Bumps [bleach](https://github.com/mozilla/bleach) from 4.1.0 to 6.2.0. - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v4.1.0...v6.2.0) --- updated-dependencies: - dependency-name: bleach dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
inducer · Nov 4, 2024 · 7b72f2a · 7b72f2a
1 parent 04d79c3
commit 7b72f2a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 8 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -97,7 +97,7 @@ django-celery-results = "^2.4.0"
 django_select2 = "^8.2.1"
 
 # To sanitize HTML generated by user code
-bleach = "^4.1"
+bleach = "^6.2"
 # bleach is based on html5lib, but they vendor it. I don't think we should fish the
 # vendored bits out of bleach, so we'll introduce our own dependency for data-URI
 # sanitization.