Skip to content

Commit 743b693

Browse files
committed
chore(deps): upgrade Wagtail to 7.3.2 to fix security advisories
Bump Wagtail from 7.2.3 to 7.3.2 to resolve five medium-severity security advisories related to improper permission handling: - GHSA-67rv-mg8q-5pf3: copying pages - GHSA-c4mr-889m-vgf6: viewing page history - GHSA-c6wj-9vcj-75pj: comparing revisions - GHSA-p5gm-92h4-6pv6: Documents and Images API restrictions - GHSA-pwm3-7fv4-g6xx: deleting form submissions Widen the constraint in main.in to >=7.3.2,<7.4 and recompile the locked requirements. All tests pass and no new project migrations are required.
1 parent 499de4a commit 743b693

3 files changed

Lines changed: 78 additions & 79 deletions

File tree

requirements/dev.txt

Lines changed: 50 additions & 51 deletions
Original file line numberDiff line numberDiff line change
@@ -2,42 +2,40 @@
22
# uv pip compile --output-file requirements/dev.txt requirements/dev.in
33
anyascii==0.3.3
44
# via
5-
# -c main.txt
5+
# -c requirements/main.txt
66
# wagtail
77
asgiref==3.11.1
88
# via
9-
# -c main.txt
9+
# -c requirements/main.txt
1010
# django
1111
beautifulsoup4==4.14.3
1212
# via
13-
# -c main.txt
13+
# -c requirements/main.txt
1414
# wagtail
1515
boolean-py==5.0
1616
# via license-expression
17-
cachecontrol[filecache]==0.14.4
18-
# via
19-
# cachecontrol
20-
# pip-audit
17+
cachecontrol==0.14.4
18+
# via pip-audit
2119
certifi==2026.4.22
2220
# via
23-
# -c main.txt
21+
# -c requirements/main.txt
2422
# requests
2523
charset-normalizer==3.4.7
2624
# via
27-
# -c main.txt
25+
# -c requirements/main.txt
2826
# requests
2927
coverage==7.13.5
30-
# via -r dev.in
28+
# via -r requirements/dev.in
3129
cyclonedx-python-lib==11.7.0
3230
# via pip-audit
3331
defusedxml==0.7.1
3432
# via
35-
# -c main.txt
33+
# -c requirements/main.txt
3634
# py-serializable
3735
# willow
3836
django==6.0.5
3937
# via
40-
# -c main.txt
38+
# -c requirements/main.txt
4139
# django-debug-toolbar
4240
# django-filter
4341
# django-modelcluster
@@ -52,69 +50,69 @@ django==6.0.5
5250
# modelsearch
5351
# wagtail
5452
django-debug-toolbar==6.3.0
55-
# via -r dev.in
53+
# via -r requirements/dev.in
5654
django-filter==25.2
5755
# via
58-
# -c main.txt
56+
# -c requirements/main.txt
5957
# wagtail
6058
django-modelcluster==6.4.1
6159
# via
62-
# -c main.txt
60+
# -c requirements/main.txt
6361
# wagtail
6462
django-permissionedforms==0.1
6563
# via
66-
# -c main.txt
64+
# -c requirements/main.txt
6765
# wagtail
6866
django-stubs-ext==6.0.3
6967
# via
70-
# -c main.txt
68+
# -c requirements/main.txt
7169
# django-tasks
7270
django-taggit==6.1.0
7371
# via
74-
# -c main.txt
72+
# -c requirements/main.txt
7573
# wagtail
7674
django-tasks==0.9.0
7775
# via
78-
# -c main.txt
76+
# -c requirements/main.txt
7977
# modelsearch
8078
# wagtail
8179
django-treebeard==4.8.0
8280
# via
83-
# -c main.txt
81+
# -c requirements/main.txt
8482
# wagtail
8583
djangorestframework==3.17.1
8684
# via
87-
# -c main.txt
85+
# -c requirements/main.txt
8886
# wagtail
8987
draftjs-exporter==5.2.0
9088
# via
91-
# -c main.txt
89+
# -c requirements/main.txt
9290
# wagtail
9391
et-xmlfile==2.0.0
9492
# via
95-
# -c main.txt
93+
# -c requirements/main.txt
9694
# openpyxl
9795
factory-boy==3.3.3
9896
# via wagtail-factories
9997
faker==40.15.0
10098
# via factory-boy
10199
fakeredis==2.35.1
102-
# via -r dev.in
100+
# via -r requirements/dev.in
103101
filelock==3.29.0
104102
# via cachecontrol
105103
filetype==1.2.0
106104
# via
107-
# -c main.txt
105+
# -c requirements/main.txt
108106
# willow
109107
idna==3.15
110108
# via
111-
# -c main.txt
109+
# -c requirements/main.txt
112110
# requests
113111
isort==8.0.1
114-
# via -r dev.in
112+
# via -r requirements/dev.in
115113
laces==0.1.2
116114
# via
117-
# -c main.txt
115+
# -c requirements/main.txt
118116
# wagtail
119117
license-expression==30.4.4
120118
# via cyclonedx-python-lib
@@ -123,42 +121,44 @@ markdown-it-py==4.0.0
123121
mdurl==0.1.2
124122
# via markdown-it-py
125123
model-mommy==2.0.0
126-
# via -r dev.in
124+
# via -r requirements/dev.in
127125
modelsearch==1.1.1
128126
# via
129-
# -c main.txt
127+
# -c requirements/main.txt
130128
# wagtail
131129
msgpack==1.1.2
132130
# via cachecontrol
133131
openpyxl==3.1.5
134132
# via
135-
# -c main.txt
133+
# -c requirements/main.txt
136134
# wagtail
137135
packageurl-python==0.17.6
138136
# via cyclonedx-python-lib
139137
packaging==26.2
140138
# via
141-
# -c main.txt
139+
# -c requirements/main.txt
142140
# pip-audit
143141
# pip-requirements-parser
144142
# pipdeptree
145143
pillow==12.2.0
146144
# via
147-
# -c main.txt
145+
# -c requirements/main.txt
148146
# pillow-heif
149147
# wagtail
150148
pillow-heif==1.3.0
151149
# via
152-
# -c main.txt
150+
# -c requirements/main.txt
153151
# willow
152+
pip==26.1.2
153+
# via pip-api
154154
pip-api==0.0.34
155155
# via pip-audit
156156
pip-audit==2.10.0
157-
# via -r dev.in
157+
# via -r requirements/dev.in
158158
pip-requirements-parser==32.0.1
159159
# via pip-audit
160160
pipdeptree==2.35.1
161-
# via -r dev.in
161+
# via -r requirements/dev.in
162162
platformdirs==4.9.6
163163
# via pip-audit
164164
py-serializable==2.1.0
@@ -169,59 +169,58 @@ pyparsing==3.3.2
169169
# via pip-requirements-parser
170170
redis==7.4.0
171171
# via
172-
# -c main.txt
172+
# -c requirements/main.txt
173173
# fakeredis
174174
requests==2.33.1
175175
# via
176-
# -c main.txt
176+
# -c requirements/main.txt
177177
# cachecontrol
178178
# pip-audit
179179
# wagtail
180180
rich==15.0.0
181181
# via pip-audit
182182
ruff==0.15.12
183-
# via -r dev.in
183+
# via -r requirements/dev.in
184184
sortedcontainers==2.4.0
185185
# via
186186
# cyclonedx-python-lib
187187
# fakeredis
188188
soupsieve==2.8.3
189189
# via
190-
# -c main.txt
190+
# -c requirements/main.txt
191191
# beautifulsoup4
192192
sqlparse==0.5.5
193193
# via
194-
# -c main.txt
194+
# -c requirements/main.txt
195195
# django
196196
# django-debug-toolbar
197197
telepath==0.3.1
198198
# via
199-
# -c main.txt
199+
# -c requirements/main.txt
200200
# wagtail
201201
tomli==2.4.1
202202
# via pip-audit
203203
tomli-w==1.2.0
204204
# via pip-audit
205205
typing-extensions==4.15.0
206206
# via
207-
# -c main.txt
207+
# -c requirements/main.txt
208208
# beautifulsoup4
209209
# django-stubs-ext
210210
# django-tasks
211211
urllib3==2.7.0
212212
# via
213-
# -c main.txt
213+
# -c requirements/main.txt
214214
# requests
215215
uv==0.11.15
216-
# via -r dev.in
217-
wagtail==7.2.3
216+
# via -r requirements/dev.in
217+
wagtail==7.3.2
218218
# via
219-
# -c main.txt
219+
# -c requirements/main.txt
220220
# wagtail-factories
221221
wagtail-factories==4.4.0
222-
# via -r dev.in
223-
willow[heif]==1.12.0
222+
# via -r requirements/dev.in
223+
willow==1.12.0
224224
# via
225-
# -c main.txt
225+
# -c requirements/main.txt
226226
# wagtail
227-
# willow

requirements/main.in

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,5 +21,5 @@ python-dateutil
2121
pytz
2222
redis
2323
requests>=2.32.5
24-
wagtail>=7.2,<7.3
24+
wagtail>=7.3.2,<7.4
2525
whitenoise

0 commit comments

Comments
 (0)