build(pyproject.toml): update dependencies, for secrity reason (#588)

.github/workflows/dashboard.yml

@@ -34,6 +34,13 @@ jobs:
       run: make edition-ee && make lint
       working-directory: src/dashboard
 
+    - name: Aqua Security Trivy
+      uses: aquasecurity/[email protected]
+      continue-on-error: true
+      with:
+        scan-type: 'fs'
+        scan-ref: 'src/dashboard'
+
     - name: Test
       run:  make edition-ee && make test
-      working-directory: src/dashboard
+      working-directory: src/dashboard

src/dashboard/apigateway/requirements.txt

@@ -1,30 +1,29 @@
 
 amqp==2.6.1 ; python_version >= "3.10" and python_version < "3.11"
-apigw-manager==2.0.0 ; python_version >= "3.10" and python_version < "3.11"
+apigw-manager==3.0.2 ; python_version >= "3.10" and python_version < "3.11"
 arrow==1.3.0 ; python_version >= "3.10" and python_version < "3.11"
 asgiref==3.7.2 ; python_version >= "3.10" and python_version < "3.11"
 attrs==22.2.0 ; python_version >= "3.10" and python_version < "3.11"
-backoff==1.10.0 ; python_version >= "3.10" and python_version < "3.11"
 beautifulsoup4==4.12.2 ; python_version >= "3.10" and python_version < "3.11"
 billiard==3.6.4.0 ; python_version >= "3.10" and python_version < "3.11"
 bk-crypto-python-sdk==1.1.1 ; python_version >= "3.10" and python_version < "3.11"
 bk-iam==1.3.4 ; python_version >= "3.10" and python_version < "3.11"
 bk-notice-sdk==1.3.1 ; python_version >= "3.10" and python_version < "3.11"
 bkapi-bcs-api-gateway==1.12.1 ; python_version >= "3.10" and python_version < "3.11"
 bkapi-bk-apigateway==1.0.11 ; python_version >= "3.10" and python_version < "3.11"
-bkapi-client-core==1.1.8 ; python_version >= "3.10" and python_version < "3.11"
+bkapi-client-core==1.2.0 ; python_version >= "3.10" and python_version < "3.11"
 bkapi-client-generator==0.1.28 ; python_version >= "3.10" and python_version < "3.11"
 bkapi-component-open==1.1.0 ; python_version >= "3.10" and python_version < "3.11"
 bkapi-paasv3==1.0.1 ; python_version >= "3.10" and python_version < "3.11"
 bkpaas-auth==2.0.6 ; python_version >= "3.10" and python_version < "3.11"
-blue-krill==2.0.2 ; python_version >= "3.10" and python_version < "3.11"
+blue-krill==2.0.3 ; python_version >= "3.10" and python_version < "3.11"
 cachetools==5.3.2 ; python_version >= "3.10" and python_version < "3.11"
 celery==4.4.7 ; python_version >= "3.10" and python_version < "3.11"
-certifi==2021.10.8 ; python_version >= "3.10" and python_version < "3.11"
+certifi==2024.2.2 ; python_version >= "3.10" and python_version < "3.11"
 cffi==1.15.0 ; python_version >= "3.10" and python_version < "3.11"
 charset-normalizer==2.0.12 ; python_version >= "3.10" and python_version < "3.11"
 click==7.1.2 ; python_version >= "3.10" and python_version < "3.11"
-cryptography==3.4.8 ; python_version >= "3.10" and python_version < "3.11"
+cryptography==42.0.5 ; python_version >= "3.10" and python_version < "3.11"
 curlify==2.2.1 ; python_version >= "3.10" and python_version < "3.11"
 dacite==1.8.1 ; python_version >= "3.10" and python_version < "3.11"
 deprecated==1.2.13 ; python_version >= "3.10" and python_version < "3.11"
@@ -42,46 +41,47 @@ drf-yasg==1.21.7 ; python_version >= "3.10" and python_version < "3.11"
 elasticsearch-dsl==7.4.1 ; python_version >= "3.10" and python_version < "3.11"
 elasticsearch==7.7.1 ; python_version >= "3.10" and python_version < "3.11"
 etcd3==0.12.0 ; python_version >= "3.10" and python_version < "3.11"
-future==0.18.2 ; python_version >= "3.10" and python_version < "3.11"
+future==0.18.3 ; python_version >= "3.10" and python_version < "3.11"
 gevent==24.2.1 ; python_version >= "3.10" and python_version < "3.11"
-googleapis-common-protos==1.56.3 ; python_version >= "3.10" and python_version < "3.11"
+googleapis-common-protos==1.59.1 ; python_version >= "3.10" and python_version < "3.11"
 greenlet==2.0.2 ; python_version >= "3.10" and python_version < "3.11"
 grpcio==1.44.0 ; python_version >= "3.10" and python_version < "3.11"
 gunicorn==21.2.0 ; python_version >= "3.10" and python_version < "3.11"
 idna==2.8 ; python_version >= "3.10" and python_version < "3.11"
-importlib-metadata==4.8.3 ; python_version >= "3.10" and python_version < "3.11"
+importlib-metadata==7.0.0 ; python_version >= "3.10" and python_version < "3.11"
 inflection==0.5.1 ; python_version >= "3.10" and python_version < "3.11"
 jinja2==3.1.3 ; python_version >= "3.10" and python_version < "3.11"
 jsonfield==3.1.0 ; python_version >= "3.10" and python_version < "3.11"
 jsonschema==3.2.0 ; python_version >= "3.10" and python_version < "3.11"
 kombu==4.6.11 ; python_version >= "3.10" and python_version < "3.11"
 markupsafe==2.1.5 ; python_version >= "3.10" and python_version < "3.11"
 mysqlclient==2.1.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-api==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-jaeger-proto-grpc==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-jaeger-thrift==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-jaeger==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-otlp-proto-grpc==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-otlp-proto-http==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-exporter-otlp==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-celery==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-dbapi==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-django==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-logging==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-redis==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-requests==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation-wsgi==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-instrumentation==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-proto==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-sdk==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-semantic-conventions==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
-opentelemetry-util-http==0.26b1 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-api==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-jaeger-proto-grpc==1.21.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-jaeger-thrift==1.21.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-jaeger==1.21.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-otlp-proto-common==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-otlp-proto-grpc==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-otlp-proto-http==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-exporter-otlp==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-celery==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-dbapi==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-django==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-logging==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-redis==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-requests==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation-wsgi==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-instrumentation==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-proto==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-sdk==1.24.0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-semantic-conventions==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
+opentelemetry-util-http==0.45b0 ; python_version >= "3.10" and python_version < "3.11"
 packaging==24.0 ; python_version >= "3.10" and python_version < "3.11"
-pillow==10.2.0 ; python_version >= "3.10" and python_version < "3.11"
+pillow==10.3.0 ; python_version >= "3.10" and python_version < "3.11"
 prometheus-client==0.12.0 ; python_version >= "3.10" and python_version < "3.11"
-protobuf==3.19.4 ; python_version >= "3.10" and python_version < "3.11"
+protobuf==3.20.3 ; python_version >= "3.10" and python_version < "3.11"
 pycparser==2.21 ; python_version >= "3.10" and python_version < "3.11"
-pycryptodomex==3.19.0 ; python_version >= "3.10" and python_version < "3.11"
+pycryptodomex==3.19.1 ; python_version >= "3.10" and python_version < "3.11"
 pydantic==1.9.2 ; python_version >= "3.10" and python_version < "3.11"
 pygments==2.17.2 ; python_version >= "3.10" and python_version < "3.11"
 pyjwt==1.7.1 ; python_version >= "3.10" and python_version < "3.11"
@@ -99,10 +99,10 @@ redis==4.1.4 ; python_version >= "3.10" and python_version < "3.11"
 requests==2.31.0 ; python_version >= "3.10" and python_version < "3.11"
 ruamel-yaml-clib==0.2.7 ; platform_python_implementation == "CPython" and python_version < "3.11" and python_version >= "3.10"
 ruamel-yaml==0.17.40 ; python_version >= "3.10" and python_version < "3.11"
-setuptools==59.6.0 ; python_version >= "3.10" and python_version < "3.11"
+setuptools==65.5.1 ; python_version >= "3.10" and python_version < "3.11"
 six==1.16.0 ; python_version >= "3.10" and python_version < "3.11"
 soupsieve==2.3.2.post1 ; python_version >= "3.10" and python_version < "3.11"
-sqlparse==0.4.3 ; python_version >= "3.10" and python_version < "3.11"
+sqlparse==0.4.4 ; python_version >= "3.10" and python_version < "3.11"
 tenacity==8.0.1 ; python_version >= "3.10" and python_version < "3.11"
 thrift==0.16.0 ; python_version >= "3.10" and python_version < "3.11"
 toml==0.10.2 ; python_version >= "3.10" and python_version < "3.11"
@@ -113,7 +113,7 @@ uritemplate==4.1.1 ; python_version >= "3.10" and python_version < "3.11"
 urllib3==2.2.1 ; python_version >= "3.10" and python_version < "3.11"
 vine==1.3.0 ; python_version >= "3.10" and python_version < "3.11"
 watchdog==1.0.2 ; python_version >= "3.10" and python_version < "3.11"
-werkzeug==2.0.3 ; python_version >= "3.10" and python_version < "3.11"
+werkzeug==3.0.1 ; python_version >= "3.10" and python_version < "3.11"
 whitenoise==6.6.0 ; python_version >= "3.10" and python_version < "3.11"
 wrapt==1.15.0 ; python_version >= "3.10" and python_version < "3.11"
 zipp==3.6.0 ; python_version >= "3.10" and python_version < "3.11"