Downgrade uwsgi to 2.0.26

[Maffooch]

Hot reloading appears to be broken in. 2.0.27. The linked GitHub issue is the same behavior that I am seeing

unbit/uwsgi#2681

[dryrunsecurity]

DryRun Security Summary

The provided code changes in the requirements.txt file indicate a minor version update to the uWSGI library, and it's recommended to thoroughly review the entire requirements.txt file and ensure all dependencies are up-to-date and secure.

Expand for full summary

Summary:

The provided code changes in the requirements.txt file indicate a minor version update to the uWSGI library, from 2.0.27 to 2.0.26. This type of version change typically includes bug fixes and minor improvements, but no major feature changes. From an application security perspective, this change does not appear to be directly related to any known security vulnerabilities. However, it's always a good practice to review the release notes or change logs of any updated dependencies to ensure there are no security-related fixes included in the new version.

Additionally, the requirements.txt file contains a comprehensive list of dependencies used by the DefectDojo application, which is an open-source web application for managing software defects. It's important to regularly review all dependencies for any known security vulnerabilities, as outdated or vulnerable dependencies can introduce security risks to the application. Overall, this code change appears to be a routine update to the application's dependencies, and there are no immediate security concerns that stand out. However, it's recommended to thoroughly review the entire requirements.txt file and ensure all dependencies are up-to-date and secure.

Files Changed:

• requirements.txt: This file contains the list of dependencies used by the DefectDojo application. The changes in this PR update the version of the uWSGI library from 2.0.27 to 2.0.26, which is a minor version change that typically includes bug fixes and minor improvements, but no major feature changes.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[mtesauro]

@Maffooch Does it make sense to update this as part of this PR or just keep an eye on dependabot PRs for uwsgi?

[Maffooch]

Just need to keep an eye on it. This breakage was not in their notes or anything. Seems like it was more of a surprise. I wouldn't want to to "blacklist" this over a bug in an upgrade that only hurts dev environments