feat: add packaged aboutcode.federated dependency

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

requirements-dev.txt

@@ -111,15 +111,15 @@ readme_renderer==43.0
 redis==6.2.0
 referencing==0.36.0
 regex==2026.2.28
-requests==2.32.4
+requests==2.33.1
 requests-toolbelt==1.0.0
 restructuredtext_lint==2.0.2
 rfc3986==2.0.0
 rich==14.3.3
 rpds-py==0.30.0
 rq==1.15.1
 rq-scheduler==0.13.1
-saneyaml==0.6.0
+saneyaml==0.6.1
 SecretStorage==3.5.0
 semantic-version==2.9.0
 semver==3.0.4

requirements.txt

@@ -62,11 +62,11 @@ PyYAML==6.0.1
 redis==6.2.0
 referencing==0.36.0
 regex==2026.2.28
-requests==2.32.4
+requests==2.33.1
 rpds-py==0.30.0
 rq==1.15.1
 rq-scheduler==0.13.1
-saneyaml==0.6.0
+saneyaml==0.6.1
 semantic-version==2.9.0
 semver==3.0.4
 six==1.16.0

setup.cfg

@@ -77,7 +77,7 @@ install_requires =
 
     # file and data formats
     binaryornot==0.4.4
-    saneyaml==0.6.0
+    saneyaml==0.6.1
     beautifulsoup4==4.13.0
     python-dateutil==2.8.2
     toml==0.10.2
@@ -90,7 +90,7 @@ install_requires =
 
     # networking
     GitPython==3.1.41
-    requests==2.32.4
+    requests==2.33.1
     fetchcode==0.8.2
 
     #pipeline
@@ -108,6 +108,9 @@ install_requires =
     #hashid
     uritemplate==4.2.0
 
+    #federation
+    aboutcode.federated==1.0.3
+
 
 [options.extras_require]
 dev =

vulnerabilities/pipelines/exporters/federate_vulnerabilities.py

@@ -14,11 +14,11 @@
 from operator import attrgetter
 from pathlib import Path
 
+from aboutcode.federated import DataFederation
 from aboutcode.pipeline import LoopProgress
 from django.conf import settings
 from django.utils import timezone
 
-from aboutcode.federated import DataFederation
 from vulnerabilities.pipelines import VulnerableCodePipeline
 from vulnerabilities.pipes import export
 from vulnerabilities.pipes import federatedcode

vulnerabilities/pipelines/v2_improvers/reference_collect_commits.py

@@ -8,12 +8,12 @@
 #
 from collections import defaultdict
 
+from aboutcode.federated import get_core_purl
 from aboutcode.pipeline import LoopProgress
 from django.db.models import Prefetch
 from packageurl.contrib.purl2url import purl2url
 from packageurl.contrib.url2purl import url2purl
 
-from aboutcode.federated import get_core_purl
 from vulnerabilities.models import AdvisoryReference
 from vulnerabilities.models import AdvisoryV2
 from vulnerabilities.models import ImpactedPackage