Commit 3696627
authored
fix(deps): upgrade 6 vulnerable transitive dependencies (#134)
* fix(deps): upgrade vulnerable transitive dependencies
Upgrades 6 packages with known security advisories:
- authlib 1.6.11 → 1.7.2 (PYSEC-2026-188)
- cryptography 46.0.7 → 49.0.0 (GHSA-537c-gmf6-5ccf)
- idna 3.11 → 3.18 (PYSEC-2026-215)
- pydantic-settings 2.13.1 → 2.14.2 (GHSA-4xgf-cpjx-pc3j)
- pyjwt 2.12.1 → 2.13.0 (PYSEC-2026-175/176/177/178/179)
- python-multipart 0.0.26 → 0.0.32 (CVE-2026-42561/53538/53539/53540)
Verified clean with pip-audit after upgrade.
* chore: remove requirements.txt files and reqs Makefile target
Switch fully to uv-managed lockfile; pip-compiled requirements files
are no longer needed.1 parent 1dbe656 commit 3696627
4 files changed
Lines changed: 70 additions & 583 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
13 | | - | |
14 | | - | |
15 | | - | |
16 | | - | |
17 | | - | |
18 | | - | |
19 | | - | |
20 | 12 | | |
21 | 13 | | |
22 | 14 | | |
| |||
This file was deleted.
0 commit comments