Skip to content

Commit bc71577

Browse files
Merge pull request #31 from Smart-AI-Memory/dependabot/pip/dev-dependencies-31adc6bfb2
Merge Dependabot PR #31: Dev dependencies update with black security patch (CVE-2024-21503)
2 parents f89c07d + 44064b9 commit bc71577

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

pyproject.toml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -184,7 +184,7 @@ dev = [
184184
"pytest-xdist>=3.5.0,<4.0", # Parallel test execution (4-8x faster)
185185
"pytest-testmon>=2.1.0,<3.0", # Run only tests affected by changes
186186
"pytest-picked>=0.5.0,<1.0", # Run tests for uncommitted changes
187-
"black>=24.3.0,<26.0", # CVE fix: PYSEC-2024-48
187+
"black>=24.3.0,<27.0", # CVE fix: PYSEC-2024-48
188188
"mypy>=1.0,<2.0",
189189
"ruff>=0.1,<1.0",
190190
"coverage>=7.0,<8.0",
@@ -303,15 +303,15 @@ all = [
303303
"mkdocs-with-pdf>=0.9.3,<1.0.0",
304304
"pymdown-extensions>=10.0,<11.0",
305305
# Dev tools
306-
"pytest>=7.0,<9.0",
307-
"pytest-asyncio>=0.21,<1.0",
308-
"pytest-cov>=4.0,<5.0",
309-
"black>=24.3.0,<26.0", # CVE fix
306+
"pytest>=7.0,<10.0",
307+
"pytest-asyncio>=0.21,<2.0",
308+
"pytest-cov>=4.0,<8.0",
309+
"black>=24.3.0,<27.0", # CVE fix
310310
"mypy>=1.0,<2.0",
311311
"ruff>=0.1,<1.0",
312312
"coverage>=7.0,<8.0",
313313
"bandit>=1.7,<2.0",
314-
"pre-commit>=3.0,<4.0",
314+
"pre-commit>=3.0,<5.0",
315315
"httpx>=0.27.0,<1.0.0", # For API testing
316316
# Security constraint overrides for transitive dependencies
317317
"urllib3>=2.3.0,<3.0.0", # CVE fix: GHSA-gm62, GHSA-2xpw

0 commit comments

Comments
 (0)