From fc8dcdbcc914c4274eed3c5bb7959e8814551f74 Mon Sep 17 00:00:00 2001 From: Feanil Patel Date: Tue, 13 Oct 2026 13:23:08 -0400 Subject: [PATCH] fix: upgrade openedx-forum to 0.4.2.post1 Security release of the forum app for GHSA-c6fp-f54c-6cv4: the forum HTTP API is no longer routed unless FORUM_ENABLE_HTTP_API is set, and requires a staff caller when it is. https://github.com/openedx/forum/security/advisories/GHSA-c6fp-f54c-6cv4 Co-Authored-By: Claude Opus 5.5 --- requirements/edx/base.txt | 2 +- requirements/edx/development.txt | 2 +- requirements/edx/doc.txt | 2 +- requirements/edx/testing.txt | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt index 751078a3b696..62697f8dff47 100644 --- a/requirements/edx/base.txt +++ b/requirements/edx/base.txt @@ -867,7 +867,7 @@ openedx-filters==3.4.1 # edx-enterprise # lti-consumer-xblock # ora2 -openedx-forum==0.4.2 +openedx-forum==0.4.2.post1 # via -r requirements/edx/kernel.in optimizely-sdk==5.4.0 # via -r requirements/edx/bundled.in diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt index 5b9df6dfd069..39da4db90ced 100644 --- a/requirements/edx/development.txt +++ b/requirements/edx/development.txt @@ -1420,7 +1420,7 @@ openedx-filters==3.4.1 # edx-enterprise # lti-consumer-xblock # ora2 -openedx-forum==0.4.2 +openedx-forum==0.4.2.post1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt diff --git a/requirements/edx/doc.txt b/requirements/edx/doc.txt index c2463e1384f2..27daf3123ed5 100644 --- a/requirements/edx/doc.txt +++ b/requirements/edx/doc.txt @@ -1047,7 +1047,7 @@ openedx-filters==3.4.1 # edx-enterprise # lti-consumer-xblock # ora2 -openedx-forum==0.4.2 +openedx-forum==0.4.2.post1 # via -r requirements/edx/base.txt optimizely-sdk==5.4.0 # via -r requirements/edx/base.txt diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt index 5194184ab650..a4bc41097b84 100644 --- a/requirements/edx/testing.txt +++ b/requirements/edx/testing.txt @@ -1087,7 +1087,7 @@ openedx-filters==3.4.1 # edx-enterprise # lti-consumer-xblock # ora2 -openedx-forum==0.4.2 +openedx-forum==0.4.2.post1 # via -r requirements/edx/base.txt optimizely-sdk==5.4.0 # via -r requirements/edx/base.txt