wheel vulnerability

Author: andgineer

.pre-commit-config.yaml

@@ -12,7 +12,7 @@ repos:
       - id: trailing-whitespace
         exclude_types: [ python ]
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.13
+    rev: v0.15.0
     hooks:
       - id: ruff
         exclude: ^tests/
@@ -56,7 +56,7 @@ repos:
           --line-length=100
         ]
   - repo: https://github.com/facebook/pyrefly-pre-commit
-    rev: 0.49.0
+    rev: 0.52.0
     hooks:
       - id: pyrefly-check
         name: pyrefly check

requirements.dev.txt

@@ -4,6 +4,8 @@
 #
 #    pip-compile requirements.dev.in
 #
+annotated-doc==0.0.4
+    # via typer
 annotated-types==0.7.0
     # via
     #   -r requirements.txt
@@ -17,7 +19,9 @@ certifi==2026.1.4
     #   -r requirements.txt
     #   requests
 cffi==2.0.0
-    # via -r requirements.txt
+    # via
+    #   -r requirements.txt
+    #   cryptography
 cfgv==3.5.0
     # via pre-commit
 charset-normalizer==3.4.4
@@ -29,8 +33,12 @@ click==8.3.1
     #   mkdocs
     #   pip-tools
     #   typer
-coverage[toml]==7.13.1
+coverage[toml]==7.13.4
     # via pytest-cov
+cryptography==46.0.5
+    # via
+    #   -r requirements.txt
+    #   google-auth
 distlib==0.4.0
     # via virtualenv
 filelock==3.20.3
@@ -43,13 +51,13 @@ google-api-core==2.29.0
     # via
     #   -r requirements.txt
     #   google-api-python-client
-google-api-python-client==2.188.0
+google-api-python-client==2.189.0
     # via
     #   -r requirements.txt
     #   google-api-python-client-stubs
 google-api-python-client-stubs==1.31.0
     # via -r requirements.dev.in
-google-auth==2.47.0
+google-auth==2.48.0
     # via
     #   -r requirements.txt
     #   google-api-core
@@ -63,7 +71,7 @@ googleapis-common-protos==1.72.0
     # via
     #   -r requirements.txt
     #   google-api-core
-httplib2==0.31.1
+httplib2==0.31.2
     # via
     #   -r requirements.txt
     #   google-api-python-client
@@ -81,7 +89,7 @@ jinja2==3.1.6
     # via mkdocs
 lazydocs==0.4.8
     # via -r requirements.dev.in
-markdown==3.10
+markdown==3.10.2
     # via mkdocs
 markdown-it-py==4.0.0
     # via rich
@@ -109,12 +117,13 @@ nodeenv==1.10.0
     # via pre-commit
 oauth2client==4.1.3
     # via -r requirements.txt
-packaging==25.0
+packaging==26.0
     # via
     #   build
     #   mkdocs
     #   pytest
-pathspec==1.0.3
+    #   wheel
+pathspec==1.0.4
     # via mkdocs
 pip-tools==7.5.2
     # via -r requirements.dev.in
@@ -128,11 +137,11 @@ pluggy==1.6.0
     #   pytest-cov
 pre-commit==4.5.1
     # via -r requirements.dev.in
-proto-plus==1.27.0
+proto-plus==1.27.1
     # via
     #   -r requirements.txt
     #   google-api-core
-protobuf==6.33.4
+protobuf==6.33.5
     # via
     #   -r requirements.txt
     #   google-api-core
@@ -149,7 +158,7 @@ pyasn1-modules==0.4.2
     #   -r requirements.txt
     #   google-auth
     #   oauth2client
-pycparser==2.23
+pycparser==3.0
     # via
     #   -r requirements.txt
     #   cffi
@@ -171,7 +180,7 @@ pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-pyrefly==0.49.0
+pyrefly==0.52.0
     # via -r requirements.dev.in
 pytest==9.0.2
     # via
@@ -202,7 +211,7 @@ requests==2.32.5
     #   requests-mock
 requests-mock==1.12.1
     # via -r requirements.dev.in
-rich==14.2.0
+rich==14.3.2
     # via typer
 rsa==4.9.1
     # via
@@ -218,13 +227,13 @@ six==1.17.0
     #   -r requirements.txt
     #   oauth2client
     #   python-dateutil
-typer==0.21.1
+typer==0.21.2
     # via lazydocs
-types-httplib2==0.31.1.20260115
+types-httplib2==0.31.2.20260125
     # via
     #   -r requirements.dev.in
     #   google-api-python-client-stubs
-types-python-dateutil==2.9.0.20251115
+types-python-dateutil==2.9.0.20260124
     # via -r requirements.dev.in
 types-requests==2.32.4.20260107
     # via -r requirements.dev.in
@@ -234,7 +243,6 @@ typing-extensions==4.15.0
     #   google-api-python-client-stubs
     #   pydantic
     #   pydantic-core
-    #   typer
     #   typing-inspection
 typing-inspection==0.4.2
     # via
@@ -255,7 +263,7 @@ watchdog==6.0.0
     # via mkdocs
 wcmatch==10.1
     # via mkdocs-awesome-pages-plugin
-wheel==0.45.1
+wheel==0.46.3
     # via pip-tools
 
 # The following packages are considered to be unsafe in a requirements file:

requirements.txt

@@ -9,14 +9,18 @@ annotated-types==0.7.0
 certifi==2026.1.4
     # via requests
 cffi==2.0.0
-    # via -r requirements.in
+    # via
+    #   -r requirements.in
+    #   cryptography
 charset-normalizer==3.4.4
     # via requests
+cryptography==46.0.5
+    # via google-auth
 google-api-core==2.29.0
     # via google-api-python-client
-google-api-python-client==2.188.0
+google-api-python-client==2.189.0
     # via -r requirements.in
-google-auth==2.47.0
+google-auth==2.48.0
     # via
     #   google-api-core
     #   google-api-python-client
@@ -25,7 +29,7 @@ google-auth-httplib2==0.3.0
     # via google-api-python-client
 googleapis-common-protos==1.72.0
     # via google-api-core
-httplib2==0.31.1
+httplib2==0.31.2
     # via
     #   -r requirements.in
     #   google-api-python-client
@@ -35,9 +39,9 @@ idna==3.11
     # via requests
 oauth2client==4.1.3
     # via -r requirements.in
-proto-plus==1.27.0
+proto-plus==1.27.1
     # via google-api-core
-protobuf==6.33.4
+protobuf==6.33.5
     # via
     #   google-api-core
     #   googleapis-common-protos
@@ -51,7 +55,7 @@ pyasn1-modules==0.4.2
     # via
     #   google-auth
     #   oauth2client
-pycparser==2.23
+pycparser==3.0
     # via cffi
 pydantic==2.12.5
     # via -r requirements.in