Merge pull request #2666 from bcgov/DESENG-845-dependabot-vulnerability-fixes

DESENG-845 – chore: update package versions to resolve vulnerabilities

Author: NatSquared

CHANGELOG.MD

@@ -1,3 +1,7 @@
+## August 25, 2025
+
+- **Chore** Updated the versions of several packages to resolve additional [Dependabot vulnerabilities](https://github.com/bcgov/met-public/security/dependabot) (internal link).
+
 ## August 22, 2025
 
 - **Chore** Resolve Dependabot vulnerability reports [🎟️ DESENG-845](https://citz-gdx.atlassian.net/browse/DESENG-845)

analytics-api/requirements.txt

@@ -1,17 +1,17 @@
 Flask-Caching==2.1.0
-Flask-Cors==6.0.0
+Flask-Cors==6.0.1
 Flask-Mail==0.9.1
 Flask-Migrate==2.7.0
 Flask-Moment==1.0.5
 Flask-SQLAlchemy==3.0.5
 Flask-Script==2.0.5
 Flask==2.2.5
-Jinja2==3.1.3
+Jinja2==3.1.6
 Mako==1.3.3
 MarkupSafe==2.1.2
 SQLAlchemy-Utils==0.40.0
 SQLAlchemy==1.4.52
-Werkzeug==3.0.3
+Werkzeug==3.0.6
 alembic==1.13.1
 aniso8601==9.0.1
 attrs==23.2.0
@@ -26,7 +26,7 @@ flask_jwt_oidc==0.3.0
 flask-marshmallow==1.0.0
 flask-restx==1.1.0
 gunicorn==23.0.0
-idna==3.4
+idna==3.7
 importlib-metadata==6.3.0
 importlib-resources==5.12.0
 itsdangerous==2.0.1

met-api/requirements.txt

@@ -12,7 +12,7 @@ flask-restplus==0.13.0
 Flask-SQLAlchemy==3.0.5
 greenlet==3.0.3
 itsdangerous==2.0.1
-Jinja2==3.1.3
+Jinja2==3.1.6
 jsonschema==4.21.1
 Mako==1.3.3
 MarkupSafe==2.1.5
@@ -29,11 +29,11 @@ pytz==2024.1
 PyYAML==6.0.1
 six==1.16.0
 SQLAlchemy==1.4.52
-Werkzeug==3.0.3
+Werkzeug==3.0.6
 flask_mail==0.9.1
 flask_restx==1.3.0
 secure==0.3.0
-flask-cors==3.0.10
+flask-cors==6.0.1
 flask_jwt_oidc==0.3.0
 pyhumps==1.6.1
 pylint==3.1.0

met-cron/requirements.txt

@@ -1,5 +1,5 @@
 Flask-Caching==2.0.1
-Flask-Cors==3.0.10
+Flask-Cors==6.0.1
 Flask-Mail==0.10.0
 Flask-Migrate==2.7.0
 Flask-Moment==1.0.6
@@ -11,7 +11,7 @@ Mako==1.3.5
 MarkupSafe==2.1.5
 SQLAlchemy-Utils==0.41.2
 SQLAlchemy==1.4.52
-Werkzeug==3.0.3
+Werkzeug==3.0.6
 alembic==1.13.2
 aniso8601==9.0.1
 attrs==23.2.0
@@ -43,7 +43,7 @@ python-dotenv==1.0.1
 python-jose==3.5.0
 pytz==2024.1
 referencing==0.35.1
-requests==2.32.3
+requests==2.32.5
 rpds-py==0.18.1
 rsa==4.9
 secure==0.3.0

met-cron/requirements/prod.txt

@@ -25,4 +25,4 @@ python-dotenv
 requests
 itsdangerous==2.0.1
 Jinja2==3.1.6
-flask-cors==3.0.10
+flask-cors==6.0.1

met-etl/requirements.txt

@@ -1,9 +1,9 @@
 flask==2.2.5
-flask-cors==3.0.10
+flask-cors==6.0.1
 flask-restx==1.3.0
 flask-moment==1.0.6
 flask-jwt-oidc==0.3.0
-Werkzeug==3.0.3
+Werkzeug==3.0.6
 marshmallow==3.21.1
 marshmallow-sqlalchemy==1.0.0
 dagster==1.10.16

notify-api/requirements.txt

@@ -12,7 +12,7 @@ flask-restplus==0.13.0
 Flask-SQLAlchemy==3.0.5
 greenlet==3.0.3
 itsdangerous==2.0.1
-Jinja2==3.1.3
+Jinja2==3.1.6
 jsonschema==4.21.1
 Mako==1.3.3
 MarkupSafe==2.1.5
@@ -33,7 +33,7 @@ Werkzeug==3.0.6
 flask_mail==0.9.1
 flask_restx
 secure==0.3.0
-flask-cors==3.0.10
+flask-cors==6.0.1
 flask_jwt_oidc==0.3.0
 pyhumps==1.6.1
 pylint==3.1.0