Fixing gunicorn and sqlparse High CVE

[arnehe030]

Hi all, the Superset 4.0.2 dependencies gunicorn < 22.0.0 and sqlparse < 0.5 are throwing High CVEs on our side. On the master branch they are already updated, are you planning to include the update in the next minor release 4.1.0?

[dosubot[bot]]

Hey there, @arnehe030! I'm here to help you with any bugs, questions, or contributions you have. Just waiting for the human maintainers, but I'll do my best to assist you in the meantime.

Yes, the updates for gunicorn and sqlparse are included in the next minor release, 4.1.0, of Superset. The pyproject.toml file specifies the updated versions:

"gunicorn>=22.0.0; sys_platform != 'win32'",
"sqlparse>=0.5.0",

For werkzeug, you can follow the steps outlined in this issue to update to version 3.0.3 or newer.

To continue talking to Dosu, mention @dosu.