dependencies: fix security issues

* Bumps dependencies.
* Adds favicons.

Co-Authored-by: Peter Weber <peter.weber@rero.ch>

pyproject.toml

@@ -27,35 +27,35 @@ invenio-oaiharvester = { git = "https://github.com/inveniosoftware/invenio-oaiha
 invenio-search = {version = ">=2.1.0,<3.0.0", extras = ["elasticsearch7"]}
 
 # Invenio core modules
-invenio-app = ">=1.3.4,<1.4.0"
-invenio-base = ">=1.2.11,<1.3.0"
-invenio-cache = ">=1.1.1,<1.2.0"
-invenio-celery = ">=1.2.4,<1.3.0"
-invenio-config = ">=1.0.3,<1.1.0"
+invenio-app = ">=1.4.0,<2.0.0"
+invenio-base = ">=1.3.0,<2.0.0"
+invenio-cache = ">=1.1.1,<2.0.0"
+invenio-celery = ">=1.2.5,<2.0.0"
+invenio-config = ">=1.0.3,<2.0.0"
 invenio-i18n = ">=2.0.0,<3.0.0"
-invenio-db = {version = ">=1.1.0,<1.2.0", extras = ["postgresql"]}
+invenio-db = {version = ">=1.1.0,<2.0.0", extras = ["postgresql"]}
 # Invenio base bundle
 invenio-admin = ">=1.4.0,<1.5.0"
-invenio-assets = ">=2.0.0,<3.0.0"
+invenio-assets = ">=3.0.0,<4.0.0"
 invenio-formatter = ">=2.0.0,<3.0.0"
 invenio-logging = {version = ">=2.0.0,<3.0.0"}
 invenio-mail = ">=2.0.0,<3.0.0"
-invenio-rest = ">=1.3.0,<1.4.0"
-invenio-theme = ">=2.0.0,<3.0.0"
+invenio-rest = ">=1.3.0,<2.0.0"
+invenio-theme = ">=3.0.0,<4.0.0"
 # Invenio auth bundle
 invenio-access = ">=2.0.0,<3.0.0"
-invenio-accounts = ">=3.0.0,<4.0.0"
-invenio-oauth2server = ">=2.0.0,<3.0.0"
-invenio-oauthclient = ">=3.0.0,<4.0.0"
-invenio-userprofiles = ">=2.3.0,<3.0.0"
+invenio-accounts = ">=5.0.0,<6.0.0"
+invenio-oauth2server = ">=2.3.0,<3.0.0"
+invenio-oauthclient = ">=4.0.0,<5.0.0"
+invenio-userprofiles = ">=3.0.0,<4.0.0"
 # Invenio metadata bundle
 invenio-indexer = ">=2.2.0,<3.0.0"
-invenio-jsonschemas = ">=1.1.4,<1.2.0"
-invenio-oaiserver = ">=2.2.0,<2.3.0"
-invenio-pidstore = ">=1.3.0,<1.4.0"
-invenio-records-rest = ">=2.2.0,<2.3.0"
-invenio-records-ui = ">=1.2.0,<1.3.0"
-invenio-records = ">=2.1.0,<2.2.0"
+invenio-jsonschemas = ">=1.1.4,<2.0.0"
+invenio-oaiserver = ">=2.2.0,<3.0.0"
+invenio-pidstore = ">=1.3.0,<2.0.0"
+invenio-records-rest = ">=2.2.0,<3.0.0"
+invenio-records-ui = ">=1.2.0,<2.0.0"
+invenio-records = ">=2.1.0,<3.0.0"
 #invenio-search-ui = ">=2.4.0,<3.0.0"
 # Pinned due to before_first_request deprecation https://flask.palletsprojects.com/en/2.2.x/api/#flask.Flask.before_first_request
 
@@ -67,7 +67,7 @@ uwsgi-tools = ">=1.1.1"
 uwsgitop = ">=0.11"
 # Pinned due to before_first_request deprecation https://flask.palletsprojects.com/en/2.2.x/api/#flask.Flask.before_first_request
 Flask = ">=2.2.0,<2.3.0"
-sentry-sdk = ">=1.0.0" # normaly in invenio-logging = {version = ">=2.0.0,<3.0.0", extras = ["sentry_sdk"]}
+sentry-sdk = "<2.0.0"
 dojson = ">=1.4.0"
 # TODO: dojson problem = AttributeError: 'Group' object has no attribute 'resultcallback'
 click = "<8.1.0"
@@ -77,10 +77,6 @@ PyYAML = ">=5.3.1"
 ijson = ">=2.5.1"
 pymarc = ">=5.0.0"
 
-## Deployment
-python-dotenv = ">=0.13.0"
-pydocstyle = ">=6.1.1"
-
 ## RERO ILS specific python modules
 poethepoet = "*"
 # TODO: solve requires invenio-indexer (<2.0.0)
@@ -94,14 +90,16 @@ sqlalchemy-continuum = ">=1.3.12,<1.4.0"
 #----------------------------------------------------------
 ## Default from Invenio
 pytest-invenio = ">=2.1.0,<3.0.0"
+python-dotenv = ">=0.13.0"
+pydocstyle = ">=6.1.1"
 Sphinx = ">=4.5.0"
 ## RERO ILS specific python packages
-safety = ">=1.8"
+safety = ">=1.8,<3.0.0"
 mock = ">=2.0.0"
 autoflake = ">=1.3.1"
 appnope = { version = "*", optional = true }
 
-[project.console_scripts]
+[tool.poetry.plugins."console_scripts"]
 rero-ils = "invenio_app.cli:cli"
 
 [tool.poetry.plugins."invenio_celery.tasks"]

rero_mef/config.py

@@ -100,6 +100,8 @@
 #: Template for error pages.
 THEME_ERROR_TEMPLATE = 'rero_mef/page_error.html'
 
+WEBPACKEXT_PROJECT = 'rero_mef.theme.webpack:project'
+
 # Email configuration
 # ===================
 #: Email address for support.