Merge pull request #105 from ACMAS/maintenance/vulnerability-patch

Vulnerability fixes and upgrades (requirements and Python version)

.github/workflows/django.yml

@@ -14,7 +14,7 @@ jobs:
     strategy:
       max-parallel: 4
       matrix:
-        python-version: [3.10.7]
+        python-version: [3.12]
 
     steps:
       - uses: actions/checkout@v3

ACMAS/app/ACMAS/settings.py

@@ -37,7 +37,7 @@
     "django.contrib.contenttypes",
     "django.contrib.sessions",
     "django.contrib.messages",
-    "django.contrib.staticfiles",
+    "django_components.safer_staticfiles",
     "ACMAS_Web",
     "django_components",
 ]

ACMAS/app/Dockerfile

@@ -7,7 +7,7 @@
 ###########
 
 # pull official base image
-FROM python:3.11.5-alpine AS builder
+FROM python:3.12-alpine AS builder
 
 # set work directory
 WORKDIR /usr/src/app
@@ -31,7 +31,7 @@ RUN pip wheel --no-cache-dir --no-deps --wheel-dir /usr/src/app/wheels -r requir
 #########
 
 # pull official base image
-FROM python:3.11.5-alpine
+FROM python:3.12-alpine
 RUN apk update --no-cache
 
 ####################################

ACMAS/app/requirements.txt

@@ -1,6 +1,6 @@
 Django==4.2.7
 django-dbbackup==4.0.2
-django_components
+django_components==0.29
 
-psycopg2-binary==2.9.7
-gunicorn==20.1.0
+psycopg2-binary==2.9.9
+gunicorn==21.2.0

ACMAS/docker-compose.yml

@@ -26,7 +26,7 @@ services:
     ports:
       - "5432:5432"
   nginx:
-    image: nginx:1.21-alpine
+    image: nginx:1.25.3-alpine
     volumes:
       - ./nginx/conf.d/:/etc/nginx/conf.d/
       - static_files:/home/app/web/staticfiles