Merge pull request #26 from uktrade/dependabot-fixes-0912

Fix critical dependabot django CVE

Author: adamwozencroft

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## [0.9.7] - 2025-09-11
+Upgrade Django to fix critical priority CVE
+
 ## [0.9.6] - 2025-09-11
 Upgrade Django to fix high priority CVE
 

djangosaml2idp/__init__.py

@@ -1 +1 @@
-__version__ = '0.9.6'
+__version__ = '0.9.7'

example_setup/idp/requirements.txt

@@ -1,4 +1,4 @@
-django==4.2.24
+django==4.2.27
 pysaml2==7.5.2
 arrow
 pytz

example_setup/sp/requirements.txt

@@ -1,4 +1,4 @@
-django==4.2.24
+django==4.2.27
 djangosaml2==1.9.1
 pysaml2==7.1.2
 arrow

pyproject.toml

@@ -16,7 +16,7 @@ exclude = '''
 
 [tool.poetry]
 name = "djangosaml2idp2"
-version = "0.9.6"
+version = "0.9.7"
 description = "Forked from the original https://github.com/OTA-Insight/djangosaml2idp to provide bugfixes and upgrades to python and django support."
 authors = ["Department for Business and Trade Platform Team <sre-team@digital.trade.gov.uk>"]
 readme = "README.rst"
@@ -40,7 +40,7 @@ codecov = ">=2.1.13"
 coverage = ">=7.9.1"
 cryptography = ">=43.0.3"
 defusedxml = ">=0.7.1"
-django = ">=4.2.24"
+django = ">=4.2.27"
 distlib = ">=0.3.9"
 elementpath = ">=4.8.0"
 filelock = ">=3.18.0"
@@ -71,7 +71,7 @@ six = ">=1.17.0"
 snowballstemmer = ">=3.0.1"
 toml = ">=0.10.2"
 tox = ">=4.27.0"
-urllib3 = ">=2.4.0"
+urllib3 = ">=2.6.0"
 virtualenv = ">=20.31.2"
 xmlschema = ">=2.5.1"
 

requirements-dev.txt

@@ -109,7 +109,7 @@ toml>=0.10.2
     #   tox
 tox>=4.27.0
     # via -r requirements-dev.in
-urllib3>=2.5.0
+urllib3>=2.6.0
     # via requests
 virtualenv>=20.31.2
     # via

setup.py

@@ -17,7 +17,7 @@
         open(os.path.join(os.path.dirname(__file__), 'README.rst')).read(),
     ]),
     install_requires=[
-        'django>=4.2.24',
+        'django>=4.2.27',
         'pysaml2>=7.1.2',
         'pytz',
         'arrow',