Security updates (#6387)

* Bump aiohttp to a patched version * Bump python-multipart to a patched version * Bump urllib3 to the latest patched version * Bump aiohttp-client-cache and aiosqlite to latest versions * Bump plotly.js and third level deps in frontend components
OpenBB-finance · May 10, 2024 · ac3f10a · ac3f10a
1 parent 5b74280
commit ac3f10a
Show file tree

Hide file tree

Showing 51 changed files with 5,208 additions and 4,045 deletions.
diff --git a/frontend-components/plotly/package-lock.json b/frontend-components/plotly/package-lock.json
diff --git a/frontend-components/plotly/package.json b/frontend-components/plotly/package.json
@@ -13,7 +13,7 @@
     "@radix-ui/react-dialog": "^1.0.3",
     "dom-to-image": "^2.6.0",
     "lodash": "^4.17.21",
-    "plotly.js-dist-min": "^2.21.0",
+    "plotly.js-dist-min": "^2.32.0",
     "posthog-js": "^1.55.0",
     "react": "^18.0.0",
     "react-dom": "^18.0.0",
@@ -23,7 +23,7 @@
     "@types/dom-to-image": "^2.6.4",
     "@types/lodash": "^4.14.195",
     "@types/node": "^18.16.3",
-    "@types/plotly.js-dist-min": "^2.3.1",
+    "@types/plotly.js-dist-min": "^2.3.4",
     "@types/react": "^18.0.27",
     "@types/react-dom": "^18.0.10",
     "@types/react-plotly.js": "^2.6.0",

diff --git a/frontend-components/tables/package-lock.json b/frontend-components/tables/package-lock.json
diff --git a/frontend-components/tables/package.json b/frontend-components/tables/package.json
@@ -22,7 +22,7 @@
     "@tanstack/match-sorter-utils": "^8.7.6",
     "@tanstack/react-table": "^8.7.9",
     "dom-to-image": "^2.6.0",
-    "plotly.js": "^2.18.2",
+    "plotly.js": "^2.32.0",
     "react": "^17.0.0",
     "react-dnd": "^16.0.1",
     "react-dnd-html5-backend": "^16.0.1",

diff --git a/openbb_platform/core/poetry.lock b/openbb_platform/core/poetry.lock
diff --git a/openbb_platform/core/pyproject.toml b/openbb_platform/core/pyproject.toml
@@ -16,12 +16,12 @@ fastapi = "^0.104.1"
 python-jose = "^3.3.0"
 uuid7 = "^0.1.0"
 posthog = "^3.3.1"
-python-multipart = "^0.0.6"
+python-multipart = "^0.0.7"
 pydantic = "^2.5.1"
 requests = "^2.31.0"
 importlib-metadata = "^6.8.0"
 python-dotenv = "^1.0.0"
-aiohttp = "^3.9.0"
+aiohttp = "^3.9.5"
 ruff = "^0.1.6"
 
 [tool.poetry.group.dev.dependencies]

diff --git a/openbb_platform/extensions/commodity/poetry.lock b/openbb_platform/extensions/commodity/poetry.lock
diff --git a/openbb_platform/extensions/crypto/poetry.lock b/openbb_platform/extensions/crypto/poetry.lock
diff --git a/openbb_platform/extensions/currency/poetry.lock b/openbb_platform/extensions/currency/poetry.lock
diff --git a/openbb_platform/extensions/derivatives/poetry.lock b/openbb_platform/extensions/derivatives/poetry.lock
diff --git a/openbb_platform/extensions/devtools/poetry.lock b/openbb_platform/extensions/devtools/poetry.lock
diff --git a/openbb_platform/extensions/econometrics/poetry.lock b/openbb_platform/extensions/econometrics/poetry.lock
diff --git a/openbb_platform/extensions/economy/poetry.lock b/openbb_platform/extensions/economy/poetry.lock
diff --git a/openbb_platform/extensions/equity/poetry.lock b/openbb_platform/extensions/equity/poetry.lock
diff --git a/openbb_platform/extensions/etf/poetry.lock b/openbb_platform/extensions/etf/poetry.lock
diff --git a/openbb_platform/extensions/fixedincome/poetry.lock b/openbb_platform/extensions/fixedincome/poetry.lock
diff --git a/openbb_platform/extensions/index/poetry.lock b/openbb_platform/extensions/index/poetry.lock
diff --git a/openbb_platform/extensions/news/poetry.lock b/openbb_platform/extensions/news/poetry.lock
diff --git a/openbb_platform/extensions/quantitative/poetry.lock b/openbb_platform/extensions/quantitative/poetry.lock
diff --git a/openbb_platform/extensions/regulators/poetry.lock b/openbb_platform/extensions/regulators/poetry.lock
diff --git a/openbb_platform/extensions/technical/poetry.lock b/openbb_platform/extensions/technical/poetry.lock
diff --git a/openbb_platform/poetry.lock b/openbb_platform/poetry.lock