From 65e73f4d7aedaf94189f6eba4f43f5f7be2a1d39 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Wed, 14 Aug 2024 02:06:49 +0000
Subject: [PATCH 1/2] python312Packages.gunicorn: 22.0.0 -> 23.0.0

Fixes CVE-2024-1135

Changelog: https://github.com/benoitc/gunicorn/releases/tag/23.0.0
Diff: https://github.com/benoitc/gunicorn/compare/22.0.0...23.0.0
---
 pkgs/development/python-modules/gunicorn/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/gunicorn/default.nix b/pkgs/development/python-modules/gunicorn/default.nix
index 909fff5b5aaa..45a7b6862421 100644
--- a/pkgs/development/python-modules/gunicorn/default.nix
+++ b/pkgs/development/python-modules/gunicorn/default.nix
@@ -22,16 +22,16 @@
 
 buildPythonPackage rec {
   pname = "gunicorn";
-  version = "22.0.0";
+  version = "23.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.6";
+  disabled = pythonOlder "3.7";
 
   src = fetchFromGitHub {
     owner = "benoitc";
     repo = "gunicorn";
     rev = "refs/tags/${version}";
-    hash = "sha256-xIXQMAdTZEBORu6789tLpT1OpBL+aveL/MfDj4f4bes=";
+    hash = "sha256-Dq/mrQwo3II6DBvYfD1FHsKHaIlyHlJCZ+ZyrM4Efe0=";
   };
 
   build-system = [ setuptools ];

From 0b136159899e31b0eb9598f5965447ff45f23b04 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Sat, 17 Aug 2024 17:03:39 -0400
Subject: [PATCH 2/2] python312Packages.mlflow: relax gunicorn dependency

Upstream wants <23.0.0
---
 pkgs/development/python-modules/mlflow/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/development/python-modules/mlflow/default.nix b/pkgs/development/python-modules/mlflow/default.nix
index 35490069b5ec..7032d0e91d51 100644
--- a/pkgs/development/python-modules/mlflow/default.nix
+++ b/pkgs/development/python-modules/mlflow/default.nix
@@ -56,6 +56,7 @@ buildPythonPackage rec {
   # but not mlflow has a 'skinny' install option which does not require `shap`.
   pythonRemoveDeps = [ "shap" ];
   pythonRelaxDeps = [
+    "gunicorn"
     "packaging"
     "pytz"
     "pyarrow"