Merge pull request #1283 from GSA/update-dependencies

update dependencies, update snyk ignore list

ckan/.snyk

@@ -37,34 +37,6 @@ ignore:
           https://github.com/GSA/data.gov/issues/4303
         expires: 2024-03-31T16:20:58.017Z
         created: 2023-05-08T16:20:58.023Z
-  SNYK-PYTHON-WERKZEUG-6041510:
-    - '*':
-        reason: >-
-          Upgrade path is complex, Issue tracked in github:
-          https://github.com/GSA/data.gov/issues/4217
-        expires: 2024-03-31T14:44:52.166Z
-        created: 2023-11-02T14:44:52.170Z
-  SNYK-PYTHON-CRYPTOGRAPHY-6050294:
-    - '*':
-        reason: >-
-          No remediation available yet; Issue tracked in github:
-          https://github.com/GSA/data.gov/issues/4532
-        expires: 2024-02-08T00:00:00.000Z
-        created: 2023-11-16T20:31:20.590Z
-  SNYK-PYTHON-CRYPTOGRAPHY-6126975:
-    - '*':
-        reason: >-
-          No remediation available yet; Issue tracked in github:
-          https://github.com/GSA/data.gov/issues/4532
-        expires: 2024-03-14T00:00:00.000Z
-        created: 2023-12-14T00:00:00.000Z
-  SNYK-PYTHON-CRYPTOGRAPHY-6149518:
-    - '*':
-        reason: >-
-          No remediation available yet; Issue tracked in github:
-          https://github.com/GSA/data.gov/issues/4532
-        expires: 2024-04-10T19:28:50.100Z
-        created: 2024-01-11T19:28:50.103Z
   SNYK-PYTHON-PYOPENSSL-6149520:
     - '*':
         reason: >-
@@ -78,10 +50,4 @@ ignore:
           No remediation available yet; Issue tracked in github:
           https://github.com/GSA/data.gov/issues/4591
         expires: 2024-04-10T19:29:54.032Z
-  SNYK-PYTHON-CRYPTOGRAPHY-6157248:
-    - '*':
-        reason: >-
-          No remediation available yet; Issue tracked in github:
-          https://github.com/GSA/data.gov/issues/4590
-        expires: 2024-04-10T19:29:54.032Z
 patch: {}

ckan/requirements.in

@@ -128,3 +128,7 @@ importlib-resources<6.0
 gevent>=23.9.0
 jinja2>=3.1.3
 cryptography>=42.0.4
+
+# lxml beyond 5.1.0 show error module 'lxml.etree' has no attribute '_ElementStringResult'
+# as in https://github.com/GSA/data.gov/issues/4681
+lxml==5.1.0

ckan/requirements.txt

@@ -4,8 +4,8 @@ Babel==2.10.3
 Beaker==1.11.0
 bleach==5.0.1
 blinker==1.5
-boto3==1.34.69
-botocore==1.34.69
+boto3==1.34.75
+botocore==1.34.75
 certifi==2024.2.2
 cffi==1.16.0
 chardet==5.2.0
@@ -62,7 +62,7 @@ MarkupSafe==2.1.5
 messytables==0.15.2
 mypy==1.9.0
 mypy-extensions==1.0.0
-newrelic==9.7.1
+newrelic==9.8.0
 nose==1.3.7
 numpy==1.26.4
 oauth2client==4.1.3
@@ -76,9 +76,9 @@ polib==1.1.1
 progressbar==2.5
 progressbar2==3.53.3
 psycopg2==2.9.3
-pyasn1==0.5.1
-pyasn1-modules==0.3.0
-pycparser==2.21
+pyasn1==0.6.0
+pyasn1_modules==0.4.0
+pycparser==2.22
 PyJWT==2.4.0
 pyOpenSSL==24.1.0
 pyparsing==3.1.2
@@ -121,6 +121,6 @@ Werkzeug==2.0.3
 wheel==0.42.0
 WTForms==3.1.2
 xlrd==2.0.1
-xmlschema==3.1.0
+xmlschema==3.2.0
 zope.event==5.0
 zope.interface==5.4.0