[UPD] poetry: security lxml 4.9.1

- update pip dependancy

pyproject.toml

@@ -21,7 +21,7 @@ authors = [ "Mathieu Benoit <mathben@technolibre.ca>",]
 python = "^3.7.12"
 Babel = "2.9.1"
 Cerberus = "^1.3.4"
-Cython = "^0.29.30"
+Cython = "^0.29.32"
 GitPython = "3.1.12"
 Jinja2 = "2.11.3"
 Js2Py = "^0.71"
@@ -33,8 +33,7 @@ PyMySQL = "^1.0.2"
 PyPDF2 = "1.27.8"
 PyYAML = "6.0"
 SOAPpy = "^0.12.22"
-SQLAlchemy = "^1.4.36"
+SQLAlchemy = "^1.4.39"
-Shapely = "1.6.4.post2"
 Sphinx = "1.6.7"
 Unidecode = "1.0.22"
 Voicent-Python = "^1.0"
@@ -50,12 +49,13 @@ beautifulsoup4 = "^4.11.1"
 bokeh = "1.1.0"
 boto3 = ">=1.20.41"
 cachetools = ">=2.0.1"
-chardet = "3.0.4"
+chardet = "5.0.0"
 click = "^8.1.3"
-cloudflare = "^2.9.10"
+cloudflare = "^2.9.11"
 code-writer = "^1.1.1"
-colorama = "^0.4.4"
+colorama = "^0.4.5"
-coverage = "^6.3.3"
+configparser = "5.0.2"
+coverage = "^6.4.2"
 cryptography = "36.0.1"
 css-html-prettify = "^2.5.5"
 ddt = "1.2.0"
@@ -63,13 +63,13 @@ decorator = "4.0.10"
 docutils = "0.17.1"
 ebaysdk = "2.1.5"
 email-validator = "^1.2.1"
-emoji = "^1.7.0"
+emoji = "^2.0.0"
 escpos = "^1.9"
-extract-msg = "^0.30.12"
+extract-msg = "^0.36.1"
 factur-x = "^2.3"
 feedparser = "5.2.1"
-flake8 = "^4.0.1"
+flake8 = "^5.0.3"
-formio-data = "^0.4.4"
+formio-data = "^0.4.5"
 freezegun = "0.3.11"
 geojson = "2.4.1"
 gevent = "1.3.4"
@@ -84,19 +84,19 @@ jira = "2.0.0"
 keystoneauth1 = "3.14.0"
 lasso = "^0.0.5"
 libsass = "0.12.3"
-lxml = "4.8.0"
+lxml = "4.9.1"
 matplotlib = ">=2.0.0"
 mock = "2.0.0"
 mpld3 = "0.3"
-mysqlclient = "^2.1.0"
+mysqlclient = "^2.1.1"
 num2words = "0.5.6"
 numpy = "1.21.1"
 oauthlib = "2.1.0"
 oca-decorators = "^0.0.1"
 ofxparse = "0.16"
-openpyxl = "^3.0.9"
+openpyxl = "^3.0.10"
-openupgradelib = "^3.3.3"
+openupgradelib = "^3.3.4"
-orjson = "^3.6.8"
+orjson = "3.6.0"
 paho-mqtt = "^1.6.1"
 pandas = "1.3.5"
 paramiko = "^2.11.0"
@@ -104,7 +104,7 @@ passlib = "1.6.5"
 pdf2image = "^1.16.0"
 pdfminer = "^20191125"
 pexpect = "^4.8.0"
-phonenumbers = "^8.12.48"
+phonenumbers = "^8.12.52"
 plotly = "4.1.0"
 premailer = "^3.10.0"
 psutil = "5.9.0"
@@ -139,14 +139,15 @@ pyusb = "1.0.0"
 pyzbar = "^0.1.9"
 qrcode = "5.3"
 raven = "^6.10.0"
-redis = "3.2.1"
+redis = "3.5.3"
 reportlab = "3.6.5"
-requests = "2.27.1"
+requests = "2.28.1"
 requests-mock = "^1.9.3"
 requests-oauthlib = "1.1.0"
 requests-toolbelt = "0.9.1"
 retrying = "^1.3.3"
 serial = "^0.0.97"
+shapely = "1.6.4.post2"
 simplejson = "3.16.0"
 slugify = "^0.0.1"
 sphinx-intl = "^2.0.1"
@@ -155,15 +156,16 @@ sphinx-rtd-theme = "^1.0.0"
 statsd = "3.2.1"
 suds-jurko = "0.6"
 toml = "^0.10.2"
+tornado = "6.1"
 twython = "^3.9.1"
-unidiff = "^0.7.3"
+unidiff = "^0.7.4"
 urllib3 = "1.26.8"
 vatnumber = "1.2"
 vcrpy = ">=2.1.1"
 vcrpy-unittest = "^0.1.7"
 vobject = "0.9.3"
 webcolors = "1.10"
-websocket-client = "^1.3.2"
+websocket-client = "^1.3.3"
 wechatpy = "^1.8.18"
 wget = "^3.2"
 wheel = "^0.37.1"
@@ -173,6 +175,7 @@ xlwt = "1.3"
 xmlformatter = "^0.2.4"
 xmltodict = "^0.13.0"
 zeep = "^4.1.0"
+zipp = ">=3.6.0"
 zxcvbn = "^4.4.28"
 
 [tool.poetry.dev-dependencies]

requirements.txt

@@ -68,6 +68,10 @@ mysqlclient
 # pyproj >=3.3.0 is not compatible with python 3.7
 pyproj==3.2.1
 
+# fix zipp depend on importlib-metadata
+zipp>=3.6.0
+
+
 # Force update dependency to fix poetry
 numpy==1.21.1
 
@@ -77,9 +81,13 @@ win_unicode_console
 # Security issue, need to update to version =>0.15.3, but odoo12 is only support ==0.11.15
 Werkzeug==0.11.15
 
+# Security issue, depend on extract-msg 0.36.1
+chardet==5.0.0
+extract-msg==0.36.1
+
 # Force version for security update
 pyyaml==6.0
-lxml==4.8.0
+lxml==4.9.1
 cryptography==36.0.1
 psutil==5.9.0
 Pillow==9.0.1
@@ -87,6 +95,6 @@ Babel==2.9.1
 reportlab==3.6.5
 pycrypto==2.6.1
 urllib3==1.26.8
-requests==2.27.1
+requests==2.28.1
 boto3>=1.20.41
 PyPDF2==1.27.8