From 8026dfc220f3492b74f0f9e67c839549b4119843 Mon Sep 17 00:00:00 2001 From: devGregA Date: Thu, 30 Jul 2026 20:03:07 -0600 Subject: [PATCH] chore(deps): bump bleach from 6.3.0 to 6.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit bleach 6.3.0's css extra caps tinycss2 at <1.5, which makes requirements.txt impossible to co-install with any package requiring tinycss2>=1.5 (e.g. weasyprint>=67) — pip fails with ResolutionImpossible. bleach 6.4.0 keeps the css extra but lifts the cap to tinycss2>=1.1.0 with no upper bound. Co-Authored-By: Claude Fable 5 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 9820ab45d23..0d966186e52 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ # requirements.txt for DefectDojo using Python 3.x -bleach==6.3.0 +bleach==6.4.0 bleach[css] celery[sqs]==5.6.3 # pycurl and boto3 are included via celery[sqs] for Celery Broker AWS (SQS) support