Security updates (#2737)

* bump security * update dependency * remove extra =
onaio · Nov 15, 2024 · a4f8a62 · a4f8a62
1 parent 7b1f271
commit a4f8a62
Show file tree

Hide file tree

Showing 6 changed files with 8 additions and 8 deletions.
diff --git a/docker/onadata-uwsgi/Dockerfile.ubuntu b/docker/onadata-uwsgi/Dockerfile.ubuntu
@@ -58,7 +58,7 @@ RUN python -m pip install --no-cache-dir -r requirements/docs.pip && \
     make -C docs html
 
 
-FROM debian:bookworm-20240812 as runtime
+FROM debian:bookworm-20241016 as runtime
 
 ENV DEBIAN_FRONTEND=noninteractive
 

diff --git a/requirements/azure.in b/requirements/azure.in
@@ -1,3 +1,3 @@
-cryptography>=39.0.1
+cryptography>=43.0.1
 django>=4.2.16,<5
 django-storages[azure]
diff --git a/requirements/azure.pip b/requirements/azure.pip
@@ -18,7 +18,7 @@ cffi==1.16.0
     # via cryptography
 charset-normalizer==3.3.2
     # via requests
-cryptography==42.0.8
+cryptography==43.0.1
     # via
     #   -r requirements/azure.in
     #   azure-storage-blob

diff --git a/requirements/base.pip b/requirements/base.pip
@@ -66,7 +66,7 @@ click-plugins==1.1.1
     # via celery
 click-repl==0.3.0
     # via celery
-cryptography==42.0.8
+cryptography==43.0.1
     # via
     #   jwcrypto
     #   onadata
@@ -328,7 +328,7 @@ rsa==4.9
     # via google-auth
 s3transfer==0.10.2
     # via boto3
-sentry-sdk==1.45.0
+sentry-sdk==2.8.0
     # via onadata
 simplejson==3.19.2
     # via onadata

diff --git a/requirements/dev.pip b/requirements/dev.pip
@@ -467,7 +467,7 @@ s3transfer==0.10.2
     # via boto3
 semver==3.0.2
     # via requirements-detector
-sentry-sdk==1.45.0
+sentry-sdk==2.8.0
     # via onadata
 setoptconf-tmp==0.3.1
     # via prospector

diff --git a/setup.cfg b/setup.cfg
@@ -90,9 +90,9 @@ install_requires =
     simplejson
     uwsgi
     django-activity-stream
-    sentry-sdk>=1.43.0,<2
+    sentry-sdk>=2.8,<3
     paho-mqtt
-    cryptography>=39.0.1
+    cryptography>=43.0.1
     #Monitoring
     analytics-python
     appoptics-metrics