fixes for dependabot

requirements.txt

@@ -5,11 +5,11 @@
 # To install dev requirements: inv requirements --dev
 # To install release requirements: inv requirements --release
 
-future==0.18.2
+future==0.18.3
 invoke==0.15.0
-Werkzeug==1.0.0
-Flask==1.0
-Mako==1.0.7
+Werkzeug==2.2.3
+Flask==2.2.5
+Mako==1.2.2
 Markdown==3.3.7
 WTForms==1.0.4
 # Fork of celery 4.1.1 with https://github.com/celery/celery/pull/4278 backported,
@@ -19,7 +19,7 @@ WTForms==1.0.4
 git+https://github.com/cos-forks/[email protected]+cos0
 kombu==4.2.0
 itsdangerous==1.1.0
-lxml==4.6.5
+lxml==4.9.1
 mailchimp3==3.0.18
 nameparser==0.5.3
 bcrypt==3.1.4
@@ -41,29 +41,29 @@ tqdm==4.28.1
 # Python markdown extensions for comment emails
 git+https://github.com/Johnetordoff/mdx_del_ins.git@django-3
 
-certifi==2020.12.5
+certifi==2023.7.22
 sendgrid==1.5.13
 
 requests>=2.21.0
-urllib3==1.26.5
+urllib3==1.26.17
 oauthlib==2.0.6
 requests-oauthlib==0.8.0
 raven==6.4.0
 django-redis==5.2.0
 
 # API requirements
-Django==3.2.17
+Django==3.2.20
 djangorestframework==3.13.1
 django-cors-headers==3.10.1
 djangorestframework-bulk==0.2.1
 hashids==1.2.0
-pyjwt==1.5.3
+pyjwt==2.4.0
 django-celery-beat==1.1.1  # BSD 3 Clause
-django-celery-results==1.0.1
+django-celery-results==2.4.0
 pyjwe==1.0.0
 # Required by pyjwe and ndg-httpsclient
 # Building wheel for cryptography >= 3.4.0 requires a Rust version incompatible with Docker base image.
-cryptography==3.3.2
+cryptography==41.0.4
 jsonschema==3.1.1
 django-guardian==2.4.0
 

requirements/release.txt

@@ -5,4 +5,4 @@
 # newrelic APM agent
 newrelic==7.16.0.178
 # uwsgi
-uwsgi==2.0.16
+uwsgi==2.0.22