DemocracyClub / WhoCanIVoteFor

60%

master: 60%

LAST BUILD ON BRANCH security20251110

branch: security20251110

CHANGE BRANCH

x

Reset

• security20251110
• 2018-locals-updates
• 2024-sheets-imports
• 2025-sheets-imports
• 339-party-emblem-size
• 340-lock-status-in-api
• An-attempt-to-explain
• Happy-New-Year!
• JoeMitchell-copyedits
• JoeMitchell-patch-1
• add-api-rule
• add-by-election-reason
• add-candidate-cvs
• add-candidate-intros-and-meta-descriptions
• add-leaflets
• add-mayoral-booklets
• add-more-fields
• add-party-manifestos
• add-scss
• add-slack-feedback-event
• additional-uk-election-ids-data
• advance-voting-translations
• always-update-by-election-reason
• api-key-fallback
• api-leaflets-and-hustsings
• application-stop
• assign-correct-posts
• attempt-rds-deploy-fix
• aws-cli-orb
• basic-auth-on-dev-and-stage
• better-ni-voter-id-link
• bluesky-embeds20250115
• booklet-mayor-of-london-2024
• breadcrumbs
• bugfix/any-non-by-elections
• bugfix/blank-ynr-id
• bugfix/cancelled-election-title
• bugfix/candidate-ordering
• bugfix/candidates
• bugfix/compilemessages
• bugfix/dependabot
• bugfix/django-version
• bugfix/duplicate-post-elections
• bugfix/hustings
• bugfix/hustings-url-length
• bugfix/import-manifestos
• bugfix/local-parties
• bugfix/local-party-card
• bugfix/logger-migrate
• bugfix/mailing-list-backend
• bugfix/manifesto-lang-cleanup
• bugfix/manifesto-language
• bugfix/parties-importer
• bugfix/party-emblem
• bugfix/party-name-migration
• bugfix/redis
• bugfix/remove-cvs
• bugfix/sites-table-replication
• bugfix/stv-explainer
• bugfix/translations
• bugfix/update-candidacies
• bugfix/voting-system
• bugfix/winner-count
• bump-ami-20250912
• bump-design-system
• bump-django-4.2.16
• bump-timeout
• bump-uk-election-timetables-2.4.0
• bump-uk-election-timetables-2.4.1
• cambridge-mayor
• cancelled-ballots-improvements
• cancelled-linebreaks
• circleci
• circleci-editor/312/master
• city-mayors
• cloudwatch-to-initial-setup
• col20241028
• col_polling_station_times
• common-apt
• compile-messages
• compile-messages-tox
• contact-details20241028
• coronavirus-updates
• corporate-overlords
• customfinder20250127
• db-router20250211
• dc-logging-client
• dc-utils20250820
• delete-odd-file
• delta-based-person-redirect-updates
• dependabot/add-v2-config-file
• dependabot/pip/aws-sam-cli-1.32.0
• dependabot/pip/aws-sam-cli-1.41.0
• dependabot/pip/awscli-1.20.50
• dependabot/pip/awscli-1.21.7
• dependabot/pip/awscli-1.22.18
• dependabot/pip/awscli-1.22.19
• dependabot/pip/awscli-1.22.27
• dependabot/pip/awscli-1.22.28
• dependabot/pip/awscli-1.22.29
• dependabot/pip/awscli-1.22.43
• dependabot/pip/awscli-1.22.74
• dependabot/pip/awscli-1.22.75
• dependabot/pip/awscli-1.22.78
• dependabot/pip/black-21.4b0
• dependabot/pip/boto3-1.34.112
• dependabot/pip/boto3-1.34.128
• dependabot/pip/boto3-1.34.132
• dependabot/pip/boto3-1.34.142
• dependabot/pip/boto3-1.34.157
• dependabot/pip/boto3-1.35.37
• dependabot/pip/boto3-1.35.77
• dependabot/pip/boto3-1.35.78
• dependabot/pip/boto3-1.35.79
• dependabot/pip/boto3-1.35.80
• dependabot/pip/boto3-1.35.81
• dependabot/pip/boto3-1.35.82
• dependabot/pip/boto3-1.35.83
• dependabot/pip/boto3-1.35.84
• dependabot/pip/boto3-1.35.85
• dependabot/pip/boto3-1.37.0
• dependabot/pip/boto3-1.37.1
• dependabot/pip/boto3-1.37.10
• dependabot/pip/boto3-1.37.11
• dependabot/pip/boto3-1.37.12
• dependabot/pip/boto3-1.37.13
• dependabot/pip/boto3-1.37.14
• dependabot/pip/boto3-1.37.15
• dependabot/pip/boto3-1.37.16
• dependabot/pip/boto3-1.37.17
• dependabot/pip/boto3-1.37.18
• dependabot/pip/boto3-1.37.19
• dependabot/pip/boto3-1.37.2
• dependabot/pip/boto3-1.37.20
• dependabot/pip/boto3-1.37.21
• dependabot/pip/boto3-1.37.22
• dependabot/pip/boto3-1.37.23
• dependabot/pip/boto3-1.37.24
• dependabot/pip/boto3-1.37.25
• dependabot/pip/boto3-1.37.26
• dependabot/pip/boto3-1.37.27
• dependabot/pip/boto3-1.37.28
• dependabot/pip/boto3-1.37.29
• dependabot/pip/boto3-1.37.3
• dependabot/pip/boto3-1.37.30
• dependabot/pip/boto3-1.37.31
• dependabot/pip/boto3-1.37.32
• dependabot/pip/boto3-1.37.33
• dependabot/pip/boto3-1.37.34
• dependabot/pip/boto3-1.37.35
• dependabot/pip/boto3-1.37.36
• dependabot/pip/boto3-1.37.37
• dependabot/pip/boto3-1.37.38
• dependabot/pip/boto3-1.37.4
• dependabot/pip/boto3-1.37.5
• dependabot/pip/boto3-1.37.6
• dependabot/pip/boto3-1.37.7
• dependabot/pip/boto3-1.37.8
• dependabot/pip/boto3-1.37.9
• dependabot/pip/boto3-1.38.0
• dependabot/pip/boto3-1.38.2
• dependabot/pip/django-2.2.13
• dependabot/pip/django-2.2.7
• dependabot/pip/django-debug-toolbar-2.0
• dependabot/pip/django-debug-toolbar-3.0
• dependabot/pip/django-debug-toolbar-3.1
• dependabot/pip/django-debug-toolbar-3.5.0
• dependabot/pip/django-extensions-3.1.1
• dependabot/pip/django-localflavor-3.1
• dependabot/pip/django-model-utils-4.1.0
• dependabot/pip/django-model-utils-4.1.1
• dependabot/pip/django-redis-4.12.1
• dependabot/pip/django-redis-5.0.0
• dependabot/pip/djangorestframework-3.10.3
• dependabot/pip/djangorestframework-3.12.2
• dependabot/pip/djangorestframework-3.16.0
• dependabot/pip/gocardless-pro-1.16.0
• dependabot/pip/gocardless-pro-1.16.1
• dependabot/pip/gocardless-pro-1.19.0
• dependabot/pip/gocardless-pro-1.20.0
• dependabot/pip/gocardless-pro-1.21.0
• dependabot/pip/gocardless-pro-1.9.0
• dependabot/pip/gunicorn-20.0.0
• dependabot/pip/hiredis-1.0.0
• dependabot/pip/hiredis-2.0.0
• dependabot/pip/icalendar-6.1.0
• dependabot/pip/icalendar-6.1.1
• dependabot/pip/icalendar-6.1.2
• dependabot/pip/icalendar-6.1.3
• dependabot/pip/pillow-5.3.0
• dependabot/pip/pillow-6.2.1
• dependabot/pip/pillow-7.1.1
• dependabot/pip/pillow-7.1.2
• dependabot/pip/pillow-7.2.0
• dependabot/pip/pillow-8.0.1
• dependabot/pip/pillow-8.1.0
• dependabot/pip/pillow-8.1.2
• dependabot/pip/pillow-8.2.0
• dependabot/pip/pillow-8.3.0
• dependabot/pip/pillow-8.4.0
• dependabot/pip/psycopg2-binary-2.7.6.1
• dependabot/pip/psycopg2-binary-2.7.7
• dependabot/pip/psycopg2-binary-2.8
• dependabot/pip/psycopg2-binary-2.8.1
• dependabot/pip/psycopg2-binary-2.8.4
• dependabot/pip/psycopg2-binary-2.8.5
• dependabot/pip/psycopg2-binary-2.8.6
• dependabot/pip/redis-3.1.0
• dependabot/pip/redis-3.2.0
• dependabot/pip/redis-3.2.1
• dependabot/pip/redis-3.3.8
• dependabot/pip/redis-4.0.2
• dependabot/pip/redis-4.1.3
• dependabot/pip/redis-4.3.2
• dependabot/pip/requests-2.26.0
• dependabot/pip/requests-2.32.3
• dependabot/pip/requirements/django-2.2.13
• dependabot/pip/requirements/django-2.2.20
• dependabot/pip/requirements/django-3.2.15
• dependabot/pip/requirements/django-4.2.18
• dependabot/pip/requirements/pillow-9.0.0
• dependabot/pip/ruff-0.0.284
• dependabot/pip/ruff-0.4.4
• dependabot/pip/ruff-0.5.4
• dependabot/pip/sentry-sdk-0.11.0
• dependabot/pip/sentry-sdk-0.11.1
• dependabot/pip/sentry-sdk-0.11.2
• dependabot/pip/sentry-sdk-0.12.2
• dependabot/pip/sentry-sdk-0.13.1
• dependabot/pip/sentry-sdk-0.19.2
• dependabot/pip/sentry-sdk-0.19.3
• dependabot/pip/sentry-sdk-0.20.0
• dependabot/pip/sentry-sdk-0.7.10
• dependabot/pip/sentry-sdk-1.5.11
• dependabot/pip/six-1.12.0
• dependabot/pip/six-1.13.0
• dependabot/pip/six-1.15.0
• dependabot/pip/sopn-publish-date-1.3.2
• dependabot/pip/stripe-2.35.1
• dependabot/pip/stripe-2.36.0
• dependabot/pip/stripe-2.36.1
• dependabot/pip/stripe-2.38.0
• dependabot/pip/stripe-2.39.0
• dependabot/pip/stripe-2.40.0
• dependabot/pip/stripe-2.43.0
• dependabot/pip/stripe-2.44.0
• dependabot/pip/stripe-2.45.0
• dependabot/pip/stripe-2.47.0
• dependabot/pip/stripe-2.48.0
• dependabot/pip/stripe-2.49.0
• dependabot/pip/stripe-2.50.0
• dependabot/pip/stripe-2.53.0
• dependabot/pip/stripe-2.54.0
• dependabot/pip/stripe-2.55.0
• dependabot/pip/stripe-2.55.1
• dependabot/pip/vcrpy-2.0.0
• dependabot/pip/vcrpy-2.0.1
• dependabot/pip/vcrpy-4.1.1
• dependencies-20251217
• design-system-0.4.1
• design-system-changes
• design-system20250122
• detect-migrate-fail
• development
• division-names20250716
• django-utils20250828
• django4.2.20
• django5-20251007
• docs/code-deploy
• donateion_on_feedback
• dont-count-uncontested-ballots
• dont-duplicate-person-redirects
• dont-retry
• dont-save-in-get-method
• dummy-profiles
• ec2_tags
• election-booklets-2021
• election-ids-10
• election-page-enhancements
• election-tts423
• elections_on_home_page
• embed-candidate-tweets
• emblem_url
• en-translations
• enable-dev-deploys
• enable-election-leaflets
• event-bridge-signup-form
• exclude-candidacies-from-import-ballots
• feat/better_error_framing
• feat/manifesto-in-lists
• feat/no-election-feedback-form
• feat/party-emblems-descriptions
• feat/party-model
• feat/party-page-emblems
• feat/party-pages-emblems
• feat/party-pages-initial
• feat/party-pages-non-party
• feat/past-election-message
• feat/postal-votes-ni
• feat/status-for-postponed-elections
• feat/update-markdown-filter
• feature-flag-hustings
• feature/add-turnout-and-spoilt-ballots
• feature/aws-lambda
• feature/cancellation-reason
• feature/croydon-referendum
• feature/division-types
• feature/election-enhancements
• feature/flourish-results
• feature/front-end-testing
• feature/goat-counter
• feature/hustings-2021
• feature/import-parish-councils
• feature/import-people
• feature/import-recent-ballots
• feature/last-updated-bio-timestamp
• feature/local-parties-2021
• feature/local-parties-update
• feature/order-by-votes
• feature/party-name
• feature/party-pages-update
• feature/party_nations
• feature/person-detail-twfy-id
• feature/photo_id_wording
• feature/previous-party-affiliation
• feature/previous-party-affiliations
• feature/previous-party-affiliations-michael
• feature/referendums
• feature/ruff
• feature/timetable-logic
• feature/volunteer-CTA
• feature/voting-feedback
• feature/whole-page-translations
• feedback-csv-new-fields
• feedback-form-changes
• fix-cache
• fix-date-format-in-ynr-request
• fix-donate-js
• fix-election-filters
• fix-email-display
• fix-hustings-on-person-page
• fix-ical
• fix-invalid-div-in-p
• fix-leaflet-display
• fix-leaflet-import
• fix-local-manifestos
• fix-manifesto-link
• fix-post-deploy-tests
• fix-ppc-metadata
• fix-territory
• fix-territory-code-not-set
• fix/TE12ST-postcode
• fix/change-candidate-edit-details
• fix/displaying-linkedin-urls
• fix/import_leaflets
• fix/indie-candidate-intros
• fix/list-current-but-past-elections
• fix/remove-parish-messaging-for-NI-and-LND
• fix/results-table-display
• fix/use-dc-utils-filter-widget
• fix_donation_form
• force-ballots
• frontend-snags
• gevent
• goatcounter-election-event
• goatcounter-event-text
• hide-all-upcoming-elections
• hotfix/2024-ge-hustings
• hotfix/2024-ge-parties-import
• hotfix/2024-manifesto-importer
• hotfix/CI-and-upgrades
• hotfix/GE-sopn-date
• hotfix/add-blog
• hotfix/add-candidate-links-to-election-table
• hotfix/add-lewisham-booklet
• hotfix/add-menu-to-single-ballot
• hotfix/add-regional-con-unionist-manifesto
• hotfix/add-regional-manifestos
• hotfix/add-ynr-api-key
• hotfix/always-show-council
• hotfix/aws-instances
• hotfix/bad-template-tag
• hotfix/ballot-meta-description
• hotfix/ballot-typo
• hotfix/biography-in-markdown
• hotfix/booklet-layout
• hotfix/booklet-mayor.salford.2024-05-02
• hotfix/booklets-for-liverpool
• hotfix/booklets-for-manchester-sheffield
• hotfix/booklets-for-midlands
• hotfix/broken-independent-card
• hotfix/bump-ds
• hotfix/cal-url
• hotfix/candidate-edit-details
• hotfix/center-copytright
• hotfix/change-trans-tags
• hotfix/city-of-london
• hotfix/count-not-available
• hotfix/cta-for-contact-info
• hotfix/dc-utils-not-found
• hotfix/decrease-feedback
• hotfix/delete-deleted-elections
• hotfix/delete-unused-deps
• hotfix/dependabot-PRs
• hotfix/dependabot-update
• hotfix/dependency-upgrades
• hotfix/deselected-formatting
• hotfix/deselected-person-detail
• hotfix/design-system-0.0.4
• hotfix/design-system-0.4.2
• hotfix/display-by-elections
• hotfix/division-suffix-error
• hotfix/django-dependabot
• hotfix/django-vulnerability
• hotfix/dont-crowdsource-after-sopn-day
• hotfix/dont-show-manifesto
• hotfix/dont-show-voter-info
• hotfix/dummy-person
• hotfix/dummy-postcode-view
• hotfix/elections-on-home-page
• hotfix/electorate-comma
• hotfix/emblem-size
• hotfix/emojis
• hotfix/error-message-handling
• hotfix/explainers-not-updating
• hotfix/export-feedback-button
• hotfix/export-sources
• hotfix/favicon
• hotfix/feedback-form-colours
• hotfix/feedback-form-for-mobile
• hotfix/feedback-more-less-likely-fix
• hotfix/fix-feedback
• hotfix/fix-mailing-list
• hotfix/fix-metadata-migration
• hotfix/fix-party-link-for-speaker
• hotfix/fix-regional-manifestos-2
• hotfix/font-size
• hotfix/future-elections
• hotfix/ge-home-page-message
• hotfix/gunicorn
• hotfix/handle-key-error-people-import
• hotfix/handle-suffix-error
• hotfix/help-text
• hotfix/homepage-id-messaging
• hotfix/hustings-import
• hotfix/hustings-ordering
• hotfix/if-uncontested-mark-elected
• hotfix/ignore-patch-updates
• hotfix/image-preview
• hotfix/import-elected
• hotfix/importers
• hotfix/independent-cards
• hotfix/joint-party
• hotfix/last-modified-date
• hotfix/last-updated-statement
• hotfix/last-updated-timestamps-endpoint
• hotfix/last-updated-voter-statement-import
• hotfix/limit-person-bio
• hotfix/link-to-wikipedia-bios
• hotfix/linkedin-username-fix
• hotfix/load-translation-tag
• hotfix/load-translations
• hotfix/make-details-consistent
• hotfix/manifestos
• hotfix/metadata-display
• hotfix/minor-text-changes
• hotfix/misc-tidy
• hotfix/misc-upgrades
• hotfix/missing-translations
• hotfix/move-booklets-to-s3
• hotfix/national-manifestos
• hotfix/national-party-manifesto
• hotfix/no-election-text
• hotfix/no-upcoming-elections
• hotfix/notifications
• hotfix/og-image-preview
• hotfix/only-import-ge-hustings
• hotfix/optional-fields
• hotfix/orphan-posts-cleanup
• hotfix/parishes-card
• hotfix/parishes-hustings
• hotfix/party-detail
• hotfix/party-filter-bug
• hotfix/party-filter-but
• hotfix/party-list-text-change
• hotfix/payload-fix
• hotfix/pcc-label
• hotfix/people-list-cancelled-election
• hotfix/person-intro
• hotfix/polls-open-postcode-view
• hotfix/post-slack-feedback-weekly
• hotfix/postal-vote-changes
• hotfix/postgres-error
• hotfix/pre-sopn-ballot-text
• hotfix/pre-sopn-day-text
• hotfix/preview-link-ballot-page
• hotfix/purge-no-id-messaging
• hotfix/referendums
• hotfix/reformat-cron-job
• hotfix/reformat-explainers
• hotfix/regional-manifestos-fixup
• hotfix/reinstate-staging-code-deploy
• hotfix/remove-banner
• hotfix/remove-by-elections-from-home
• hotfix/remove-en-from-cy-file
• hotfix/remove-facebook-mentions
• hotfix/remove-postal-vote
• hotfix/remove-posts-fields
• hotfix/remove-results-app
• hotfix/remove-results-banner
• hotfix/remove-scope
• hotfix/remove-staging-from-ci
• hotfix/remove-status
• hotfix/remove-travis
• hotfix/replace-ppcs-banner
• hotfix/results-banner
• hotfix/results-importers
• hotfix/results-table
• hotfix/revert-col-edge-case
• hotfix/revert-home-page-elections
• hotfix/run-national-party-importer-more
• hotfix/schedule-weekly-slack-feedback
• hotfix/sendgrid-config
• hotfix/show-explanations-booklets
• hotfix/show-national-party
• hotfix/signup-url
• hotfix/sitemaps
• hotfix/slack-cron-job
• hotfix/slack-feedback-frequency
• hotfix/slack-notifications
• hotfix/social-media-updates
• hotfix/sopn-links
• hotfix/sopn-publish-date
• hotfix/sort-by-elected
• hotfix/speaker-page
• hotfix/special-chars
• hotfix/stop-importing-local-parties
• hotfix/stv-translation
• hotfix/translate-how-to-vote
• hotfix/translation-bug
• hotfix/translation-correction
• hotfix/turn-off-id-messaging
• hotfix/turn-off-results
• hotfix/uk-election-timetables-2.3.0
• hotfix/uncontested-metadata
• hotfix/uncontested-template-fix
• hotfix/uncontested-text
• hotfix/uncontested-translation
• hotfix/update-election-timetables
• hotfix/update-welsh-for-hustings
• hotfix/utils-version
• hotfix/welsh-stv-text
• hotfix/wikipedia-duplicate
• hotfix/wikipedia-job
• hotfix/www-redirect
• hotfix/ynmp-parties
• hotfix/ynr-key-import-people
• hotfix/yorkshire-booklets
• hustings-2022
• hustings-2023
• hustings-time
• hustings-warning
• import-nesta-educational-data
• importer-debuging
• increase-instances
• increase-prod-instances
• invalid-html20241025
• issue269
• lambda-event-tweaks
• last-updated-ts
• leaflets
• less-insertion
• link-cards
• link-to-where-for-ambiguous-postcodes
• linky-slacky
• list-explainers
• load-testing-1
• local-example
• local-parties
• local-parties-2022
• local-parties-2023
• local-parties-dont-order-rows
• log-election-shown
• logger-db
• longer-lambda-time
• m1_readme_updates
• macos-installation
• markdown-to-html
• markdownit20251002
• master
• match-on-party-object
• michael-test
• migrations20250804
• moar-checks202408
• move-to-alb
• move-to-uv
• name-mayoral-elections
• new-ee-base-image-subdivide
• nicer-maps
• non-division-elections
• nosnippet20250819
• num_ballots_fix
• open-details-on-hash-change
• parl-24-results
• parl-boundary-change-card
• party-errors20250428
• person-redirects
• pluralized_division_name20250428
• pmk01-patch-1
• pmk01-patch-10
• pmk01-patch-11
• pmk01-patch-12
• pmk01-patch-13
• pmk01-patch-14
• pmk01-patch-2
• pmk01-patch-3
• pmk01-patch-4
• pmk01-patch-5
• pmk01-patch-6
• pmk01-patch-8
• pmk01-patch-9
• post-election-changes
• postalvotes20250408
• ppc-banner
• ppc-fixes
• previous-party-template
• rds-settings-changes
• re-enable-cron-jobs
• really-remove-upcoming-elections
• rebase-test
• redis
• reduce-churn20250818
• reduce-instance-count
• reduce-prod-instances
• ref2
• refactor/YNRBallotImporter-set-territory
• refactor/always-import-current-metadata
• referendum-text
• remove-duplicate-sentry
• remove-embedded-ee
• remove-feedback-db
• remove-get_voter_id_reqs
• remove-home-page-ballots
• remove-mentions
• remove-parl-boundaries
• remove-results-2022
• replaced-elections-on-home-page
• requests-timeouts
• requirements-changes
• resp20241025
• results
• scaledown20250502
• security-updates-20260109
• sentry
• sentry-disallowed-host
• show-by-elections
• show-candidates-smarter
• slack-feedback
• small-ds-cleanups
• smaller-candidates-cards
• sopndate-20250212
• staging
• standing-link
• stop-deadlocks
• stv-seats
• sync_elections_cron
• temp20240821
• test-increase-instances
• testdev20240821
• tfgg-patch-1
• tmp-fix-ref-pages
• tower-hamlets-mayor-booklet
• transifex
• translate-ballot-pages
• translations_locale-en-lc-messages-django-po--master_cy
• translations_locale-en-lc-messages-django-po--transifex_cy
• turn-off-import-local-parties
• typo/-person-about-card
• uk-election-pkgs20241112
• uk-election-timetables-4.2.2
• uncontested-fixes
• update-ami-gevent
• update-deps
• update-ee-ami
• update-import-parties
• update-readme
• updates-for-senedd-and-sp
• upgrades202408
• urllib20251112
• use-ee-base-ami
• uv8
• uv9
• vac-deadline
• verb-logic-for-crrent-elections
• voter-registration-deadline
• welsh-translations
• welsh-translations-continued
• wiki-bios20251002
• wikipedia
• wikipedia-once
• ynr_cta

Build # e240b3ec-47e3-4b9a-ad3b-c3fe501b3555

Build Type

Pull #2311

circleci

Committed by chris48s

Commit Message

bump packages with known security issues

Pull Request Pull Request #2311: bump packages with known security issues

Run Details

2979 of 5005 relevant lines covered (59.52%)

0.6 hits per line