pyrefly run in system

scapy version without Pickle Deserialization #32 vulnerability

Author: andgineer

.pre-commit-config.yaml

@@ -12,7 +12,7 @@ repos:
       - id: trailing-whitespace
         exclude_types: [ python ]
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.8
+    rev: v0.14.10
     hooks:
       - id: ruff
         exclude: ^tests/
@@ -56,11 +56,11 @@ repos:
           --line-length=100
         ]
   - repo: https://github.com/facebook/pyrefly-pre-commit
-    rev: 0.45.1
+    rev: 0.46.1
     hooks:
       - id: pyrefly-check
         name: pyrefly check
-        pass_filenames: false
+        language: system
         args: [
           "--ignore=missing-import",
           "--ignore=missing-source-for-stubs",

requirements.dev.in

@@ -14,6 +14,7 @@ freezegun
 
 # code quality
 pre-commit
+pyrefly
 
 # type stubs
 google-api-python-client-stubs

requirements.dev.txt

@@ -12,7 +12,7 @@ bracex==2.6
     # via wcmatch
 build==1.3.0
     # via pip-tools
-cachetools==6.2.2
+cachetools==6.2.4
     # via
     #   -r requirements.txt
     #   google-auth
@@ -37,7 +37,7 @@ coverage[toml]==7.13.0
     # via pytest-cov
 distlib==0.4.0
     # via virtualenv
-filelock==3.20.0
+filelock==3.20.1
     # via virtualenv
 freezegun==1.5.5
     # via -r requirements.dev.in
@@ -53,13 +53,13 @@ google-api-python-client==2.187.0
     #   google-api-python-client-stubs
 google-api-python-client-stubs==1.31.0
     # via -r requirements.dev.in
-google-auth==2.43.0
+google-auth==2.45.0
     # via
     #   -r requirements.txt
     #   google-api-core
     #   google-api-python-client
     #   google-auth-httplib2
-google-auth-httplib2==0.2.1
+google-auth-httplib2==0.3.0
     # via
     #   -r requirements.txt
     #   google-api-python-client
@@ -109,7 +109,7 @@ mkdocs-get-deps==0.2.0
     # via mkdocs
 natsort==8.4.0
     # via mkdocs-awesome-pages-plugin
-nodeenv==1.9.1
+nodeenv==1.10.0
     # via pre-commit
 oauth2client==4.1.3
     # via -r requirements.txt
@@ -130,9 +130,9 @@ pluggy==1.6.0
     # via
     #   pytest
     #   pytest-cov
-pre-commit==4.5.0
+pre-commit==4.5.1
     # via -r requirements.dev.in
-proto-plus==1.26.1
+proto-plus==1.27.0
     # via
     #   -r requirements.txt
     #   google-api-core
@@ -167,14 +167,16 @@ pygments==2.19.2
     # via
     #   pytest
     #   rich
-pyparsing==3.2.5
+pyparsing==3.3.1
     # via
     #   -r requirements.txt
     #   httplib2
 pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
+pyrefly==0.46.1
+    # via -r requirements.dev.in
 pytest==9.0.2
     # via
     #   -r requirements.dev.in
@@ -211,7 +213,7 @@ rsa==4.9.1
     #   -r requirements.txt
     #   google-auth
     #   oauth2client
-scapy==2.6.0
+scapy==2.7.0
     # via -r requirements.txt
 shellingham==1.5.4
     # via typer
@@ -220,7 +222,7 @@ six==1.17.0
     #   -r requirements.txt
     #   oauth2client
     #   python-dateutil
-typer==0.20.0
+typer==0.21.0
     # via lazydocs
 types-httplib2==0.31.0.20250913
     # via
@@ -246,7 +248,7 @@ uritemplate==4.2.0
     # via
     #   -r requirements.txt
     #   google-api-python-client
-urllib3==2.6.1
+urllib3==2.6.2
     # via
     #   -r requirements.txt
     #   requests

requirements.in

@@ -1,7 +1,7 @@
 # dependencies list to build requirements.txt with pip-compile (from pip-tools package)
 python-dateutil
-# in scapy 2.6.1 found Arbitrary Code Execution via Untrusted Pickle Deserialization #32
-scapy!=2.6.1
+# in scapy 2.6.0/1 found Arbitrary Code Execution via Untrusted Pickle Deserialization #32
+scapy!=2.6.1,!=2.6.0
 oauth2client
 google-api-python-client
 requests

requirements.txt

@@ -6,7 +6,7 @@
 #
 annotated-types==0.7.0
     # via pydantic
-cachetools==6.2.2
+cachetools==6.2.4
     # via google-auth
 certifi==2025.11.12
     # via requests
@@ -18,12 +18,12 @@ google-api-core==2.28.1
     # via google-api-python-client
 google-api-python-client==2.187.0
     # via -r requirements.in
-google-auth==2.43.0
+google-auth==2.45.0
     # via
     #   google-api-core
     #   google-api-python-client
     #   google-auth-httplib2
-google-auth-httplib2==0.2.1
+google-auth-httplib2==0.3.0
     # via google-api-python-client
 googleapis-common-protos==1.72.0
     # via google-api-core
@@ -37,7 +37,7 @@ idna==3.11
     # via requests
 oauth2client==4.1.3
     # via -r requirements.in
-proto-plus==1.26.1
+proto-plus==1.27.0
     # via google-api-core
 protobuf==6.33.2
     # via
@@ -59,7 +59,7 @@ pydantic==2.12.5
     # via -r requirements.in
 pydantic-core==2.41.5
     # via pydantic
-pyparsing==3.2.5
+pyparsing==3.3.1
     # via httplib2
 python-dateutil==2.9.0.post0
     # via -r requirements.in
@@ -71,7 +71,7 @@ rsa==4.9.1
     # via
     #   google-auth
     #   oauth2client
-scapy==2.6.0
+scapy==2.7.0
     # via -r requirements.in
 six==1.17.0
     # via
@@ -86,5 +86,5 @@ typing-inspection==0.4.2
     # via pydantic
 uritemplate==4.2.0
     # via google-api-python-client
-urllib3==2.6.1
+urllib3==2.6.2
     # via requests