Update requirements.

CHANGES.txt

@@ -1,6 +1,8 @@
 Change History
 ==============
 
+- Upgrade ``requirements.txt``.  [fixes #576]
+
 - Remove CircleCI
 
 - Fix broken tags widget (#562).

kotti/views/form.py

@@ -7,7 +7,7 @@
 .. inheritance-diagram:: kotti.views.form
 """
 
-from collections import MutableMapping
+from collections.abc import MutableMapping
 from io import BytesIO
 
 import colander

requirements.txt

@@ -1,19 +1,19 @@
-alembic==1.3.3
-appdirs==1.4.3
+alembic==1.4.2
+appdirs==1.4.4
 Babel==2.8.0
 Beaker==1.11.0
-bleach==3.1.0
+bleach==3.1.5
 bleach-whitelist==0.0.10
-Chameleon==3.6.2
-Click==7.0
+Chameleon==3.7.4
+click==7.1.2
 colander==1.7.0
 deform==2.0.8
 docopt==0.6.2
 fanstatic==1.1
 filedepot==0.7.1
 FormEncode==2.0.0a1
 html2text==2020.1.16
-hupper==1.9.1
+hupper==1.10.2
 iso8601==0.1.11
 js.angular==1.1.4
 js.bootstrap==3.3.4
@@ -32,16 +32,17 @@ js.jqueryui-tagit==2.0.24.post2
 js.modernizr==2.5.3.1
 js.select2==4.0.4.post1
 js.tinymce==4.5.4
-LEPL==5.1.3
 lingua==4.14
-Mako==1.1.1
+Mako==1.1.3
 MarkupSafe==1.1.1
-PasteDeploy==2.0.1
+packaging==20.4
+PasteDeploy==2.1.0
 peppercorn==0.6
 plaster==1.0
 plaster-pastedeploy==0.7
 polib==1.1.0
 py-bcrypt==0.4
+pyparsing==2.4.7
 pyramid==1.10.4
 pyramid-beaker==0.8
 pyramid-chameleon==0.3
@@ -51,31 +52,31 @@ pyramid-tm==2.4
 pyramid-zcml==1.2.0
 python-dateutil==2.8.1
 python-editor==1.0.4
-pytz==2019.3
+pytz==2020.1
 repoze.lru==0.7
 repoze.sendmail==4.4.1
 repoze.workflow==1.0b1
 repoze.zcml==1.0b1
 shutilwhich==1.1.0
-six==1.14.0
-SQLAlchemy==1.3.13
-SQLAlchemy-Utils==0.36.1
+six==1.15.0
+SQLAlchemy==1.3.17
+SQLAlchemy-Utils==0.36.6
 transaction==3.0.0
 translationstring==1.3
 Unidecode==1.1.1
 usersettings==1.0.7
 venusian==3.0.0
-waitress==1.4.3
+waitress==1.4.4
 webencodings==0.5.1
 WebOb==1.8.6
-zope.component==4.6
-zope.configuration==4.3.1
+zope.component==4.6.1
+zope.configuration==4.4.0
 zope.deferredimport==4.3.1
 zope.deprecation==4.4.0
 zope.event==4.4
-zope.hookable==5.0.0
-zope.i18nmessageid==5.0.0
-zope.interface==4.7.1
-zope.proxy==4.3.3
-zope.schema==4.9.3
-zope.sqlalchemy==1.2
+zope.hookable==5.0.1
+zope.i18nmessageid==5.0.1
+zope.interface==5.1.0
+zope.proxy==4.3.5
+zope.schema==6.0.0
+zope.sqlalchemy==1.3

setup.py

@@ -19,7 +19,7 @@
     'Babel',
     'Chameleon>=2.7.4',  # Fixes error when raising HTTPFound
     'alembic>=0.8.0',
-    'bleach>=2.1.4',  # https://nvd.nist.gov/vuln/detail/CVE-2018-7753
+    'bleach>=3.1.4',
     'bleach-whitelist',
     'colander>=1.3.2',
     'deform>=2.0.5',  # fixes file upload on py3 - uncomment after 2.0.5 is released  # noqa