Skip to content

[compliance] Update devbox examples with vulnerabilities - #2753

Merged
loreto merged 1 commit into
mainfrom
daniel/deps3
Dec 17, 2025
Merged

[compliance] Update devbox examples with vulnerabilities#2753
loreto merged 1 commit into
mainfrom
daniel/deps3

Conversation

@loreto

Copy link
Copy Markdown
Contributor

Summary

.Update devbox examples with vulnerabilities. Bump Django from 4.2.22 to 4.2.27 in the Django stack requirements. Update filelock from 3.18.0 to 3.20.1 in the PyTorch basic example poetry.lock file.

How was it tested?

devbox shell

Community Contribution License

All community contributions in this pull request are licensed to the project
maintainers under the terms of the
Apache 2 License.

By creating this pull request, I represent that I have the right to license the
contributions to the project maintainers under the Apache 2 License as stated in
the
Community Contribution License.

Bump Django from 4.2.22 to 4.2.27 in the Django stack requirements. Update filelock from 3.18.0 to 3.20.1 in the PyTorch basic example poetry.lock file.

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates dependency versions in devbox examples to address known security vulnerabilities. The updates include Django in the Django stack example and filelock in the PyTorch basic example, bringing both to their latest secure versions.

  • Upgraded Django from 4.2.22 to 4.2.27 to address security vulnerabilities
  • Updated filelock from 3.18.0 to 3.20.1 with corresponding poetry.lock changes including hashes and metadata

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

FileDescription
examples/stacks/django/requirements.txtBumped Django version from 4.2.22 to 4.2.27 to address security vulnerabilities
examples/data_science/pytorch/basic-example/poetry.lockUpdated filelock from 3.18.0 to 3.20.1, including updated file hashes, python version requirement, and removed extras metadata

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@loreto
loreto merged commit a2b6b73 into mainDec 17, 2025
35 checks passed
@loreto
loreto deleted the daniel/deps3 branch December 17, 2025 16:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@loreto@mikeland73