diff --git a/CHANGELOG.md b/CHANGELOG.md index a5652de..caaeae3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [PEP 440](https://www.python.org/dev/peps/pep-0440/) and uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [0.1.2] +### Fixed +- Upgraded to flask-cors v5.0.0 from v4.0.1. Resolves [CVE-2024-6221](https://www.cve.org/CVERecord?id=CVE-2024-6221). + ## [0.1.1] ### Changed - Upgrade the API Lambda runtime from Python 3.8 to 3.12. This Python version pin was overlooked during the previous release. diff --git a/requirements-all.txt b/requirements-all.txt index 0aed293..f632349 100644 --- a/requirements-all.txt +++ b/requirements-all.txt @@ -1,13 +1,13 @@ -boto3==1.34.140 -cfn-lint==1.5.0 -flake8==7.1.0 +boto3==1.35.10 +cfn-lint==1.12.1 +flake8==7.1.1 flake8-blind-except==0.2.1 flake8-builtins==2.5.0 flake8-import-order==0.18.2 -pytest==8.2.2 -moto==5.0.11 +pytest==8.3.2 +moto==5.0.13 responses==0.25.3 -pyYAML==6.0.1 +pyYAML==6.0.2 -r requirements-find-new.txt -r requirements-api.txt -r requirements-harvest-products.txt diff --git a/requirements-api.txt b/requirements-api.txt index 5256949..c6d3840 100644 --- a/requirements-api.txt +++ b/requirements-api.txt @@ -1,4 +1,4 @@ flask==3.0.3 -Flask-Cors==4.0.1 +Flask-Cors==5.0.0 serverless_wsgi==3.0.4 ./database diff --git a/requirements-find-new.txt b/requirements-find-new.txt index e09750b..0cabdf6 100644 --- a/requirements-find-new.txt +++ b/requirements-find-new.txt @@ -1,5 +1,5 @@ -asf-search==7.1.3 -hyp3-sdk==6.1.0 +asf-search==8.0.1 +hyp3-sdk==7.0.1 python-dateutil==2.9.0.post0 requests==2.32.3 ./database diff --git a/requirements-harvest-products.txt b/requirements-harvest-products.txt index 696d548..150cc90 100644 --- a/requirements-harvest-products.txt +++ b/requirements-harvest-products.txt @@ -1,3 +1,3 @@ -hyp3-sdk==6.1.0 +hyp3-sdk==7.0.1 requests==2.32.3 ./database