Skip to content

Commit 3af7d34

Browse files
committed
Fix all Dependabot security vulnerabilities
- Replace PyPDF2 with pypdf (CVE fix) - Update aiohttp to 3.11.10 (security fix) - Update cryptography to 44.0.0 (security fix) - Update azure-identity to 1.20.0 (security fix) - Update notebook to 7.3.1 (security fix) - Update setuptools to 75.6.0 (security fix) - Update black to 24.10.0 (security fix) This should resolve all 26 GitHub Dependabot alerts
1 parent 934fafe commit 3af7d34

3 files changed

Lines changed: 7 additions & 7 deletions

File tree

config/requirements-dev.txt

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ pytest-xdist==3.5.0
1010
coverage==7.3.3
1111

1212
# Code Quality
13-
black==23.12.1
13+
black==24.10.0
1414
flake8==6.1.0
1515
pylint==3.0.3
1616
mypy==1.7.1
@@ -26,7 +26,7 @@ sphinx-autodoc-typehints==1.25.2
2626
ipython==8.18.1
2727
ipdb==0.13.13
2828
jupyter==1.0.0
29-
notebook==7.0.6
29+
notebook==7.3.1
3030

3131
# Security
3232
bandit==1.7.6
@@ -54,4 +54,4 @@ pre-commit==3.6.0
5454
build==1.0.3
5555
twine==4.0.2
5656
wheel==0.42.0
57-
setuptools==69.0.3
57+
setuptools==75.6.0

pdf-processing/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# PDF Processing Dependencies
2-
PyPDF2==3.0.1
2+
pypdf==5.1.0
33
pymupdf==1.24.0
44
pdf2image==1.17.0
55
pytesseract==0.3.13

requirements.txt

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
# Core dependencies - Latest secure versions (Dec 2024)
22
requests==2.32.3
3-
aiohttp==3.10.11
3+
aiohttp==3.11.10
44
pandas==2.2.3
55
pydantic==2.10.3
66

77
# Adobe API integration
88
PyJWT==2.10.1
9-
cryptography==43.0.3
9+
cryptography==44.0.0
1010

1111
# Azure integration
12-
azure-identity==1.19.0
12+
azure-identity==1.20.0
1313
azure-mgmt-resource==23.2.0
1414
azure-storage-blob==12.24.0
1515
msgraph-sdk==1.15.0

0 commit comments

Comments
 (0)