From ccb816dad40a9512cd7e429233a764073b6ace19 Mon Sep 17 00:00:00 2001
From: RhodeCode Admin <admin@rhodecode.com>
Date: Fri, 2 Jan 2026 11:57:55 +0100
Subject: [PATCH 1/3] deps: bumped celery to fix some found bugs

---
 requirements.txt | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 506a2665..dd3cf8ba 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,9 +9,8 @@ alembic==1.13.1
 async-timeout==4.0.3
 babel==2.12.1
 beaker==1.13.0
-celery==5.6.0
-  billiard==4.2.3
-  click==8.1.8
+celery==5.6.1
+  billiard==4.2.4
   click-didyoumean==0.3.1
     click==8.1.8
   click-plugins==1.1.1
@@ -20,7 +19,7 @@ celery==5.6.0
     click==8.1.8
     prompt_toolkit==3.0.48
       wcwidth==0.2.13
-  kombu==5.6.1
+  kombu==5.6.2
     amqp==5.3.1
       vine==5.1.0
     tzdata==2025.2

From fa77fc85b0e6b4ebdea372c9ac2b0799c43730a3 Mon Sep 17 00:00:00 2001
From: RhodeCode Admin <admin@rhodecode.com>
Date: Fri, 2 Jan 2026 12:17:49 +0100
Subject: [PATCH 2/3] deps: bumped redis and urllib3 for security

---
 requirements.txt | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index dd3cf8ba..5f0873e6 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,6 @@ alembic==1.13.1
   sqlalchemy==1.4.54
     greenlet==3.3.0
   typing_extensions==4.15.0
-async-timeout==4.0.3
 babel==2.12.1
 beaker==1.13.0
 celery==5.6.1
@@ -68,7 +67,7 @@ channelstream==0.7.1
     certifi==2025.11.12
     charset-normalizer==3.4.4
     idna==3.11
-    urllib3==2.5.0
+    urllib3==2.6.2
   ws4py==0.5.1
 deform==2.0.15
   chameleon==3.10.2
@@ -112,7 +111,7 @@ ipython==8.26.0
   traitlets==5.14.3
   typing_extensions==4.15.0
 markdown==3.4.3
-msgpack==1.1.0
+msgpack==1.1.2
 mysqlclient==2.1.1
 nbconvert==7.7.3
   beautifulsoup4==4.12.3
@@ -177,7 +176,7 @@ premailer==3.10.0
     certifi==2025.11.12
     charset-normalizer==3.4.4
     idna==3.11
-    urllib3==2.5.0
+    urllib3==2.6.2
 psutil==5.9.8
 psycopg2==2.9.11
 py-bcrypt==0.4
@@ -234,8 +233,7 @@ python3-saml==1.16.0
   xmlsec==1.3.14
     lxml==5.3.0
 pyyaml==6.0.1
-redis==5.2.0
-  async-timeout==4.0.3
+redis==7.1.0
 regex==2022.10.31
 routes==2.5.1
   repoze.lru==0.7
@@ -260,7 +258,7 @@ s3fs==2025.10.0
       jmespath==1.0.1
       python-dateutil==2.9.0.post0
         six==1.17.0
-      urllib3==2.5.0
+      urllib3==2.6.2
     python-dateutil==2.9.0.post0
       six==1.17.0
     jmespath==1.0.1

From 58af66e2340fae180a97caeb27b5201670e4fa40 Mon Sep 17 00:00:00 2001
From: RhodeCode Admin <admin@rhodecode.com>
Date: Mon, 5 Jan 2026 13:31:04 +0100
Subject: [PATCH 3/3] deps: pin rhodecode-tools-4-4-0

---
 requirements_rc_tools.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements_rc_tools.txt b/requirements_rc_tools.txt
index 34713e49..ad021ba5 100644
--- a/requirements_rc_tools.txt
+++ b/requirements_rc_tools.txt
@@ -1,3 +1,3 @@
 ## rhodecode-tools, special case, use file://PATH.tar.gz#egg=rhodecode-tools==X.Y.Z, to test local version
-rhodecode-tools @ https://code.rhodecode.com/_file_store/download/0-0d04a021-7280-4363-8830-e0c4bd5e680b.3.0.tar.gz#egg=rhodecode-tools
-rhodecode-tools==4.3.0
+rhodecode-tools @ https://code.rhodecode.com/_file_store/download/0-3b32d557-a810-4e87-a58b-b5c96d2c1513.4.0.tar.gz#egg=rhodecode-tools
+rhodecode-tools==4.4.0