chore: merge dependency updates from PRs #26-#49 and remove CodeQL checks
Backend (Python): - pydantic 2.5.3 → 2.12.5 - pydantic-settings 2.1.0 → 2.13.1 - psycopg2-binary 2.9.9 → 2.9.11 - asyncpg 0.29.0 → 0.31.0 - stripe 7.11.0 → 14.4.1 - aioimaplib 1.0.1 → 2.0.1 - google-auth-httplib2 0.2.0 → 0.3.0 - celery 5.3.6 → 5.6.2 - redis 5.0.1 → 7.3.0 - tenacity 8.2.3 → 9.1.4 Frontend (npm): - react 19.2.3 → 19.2.4 - @tanstack/react-query ^5.90.20 → ^5.95.0 - axios ^1.13.5 → ^1.13.6 - zustand ^5.0.11 → ^5.0.12 - eslint ^9 → ^10 - eslint-config-next 16.1.6 → 16.2.1 Docker: - Python base image 3.11-slim → 3.14-slim CI/CD: - actions/setup-python v5 → v6 - actions/setup-node v4 → v6 - docker/setup-buildx-action v3 → v4 - codecov/codecov-action v3 → v5 - Python version 3.11 → 3.14, Node.js 18 → 20 - Removed CodeQL checks (was blocking builds) Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com> Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/d8a6f888-1c85-4de6-a36d-55e9dcd7489e
This commit is contained in:
+1
-1
@@ -1,4 +1,4 @@
|
||||
FROM python:3.11-slim
|
||||
FROM python:3.14-slim
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /app
|
||||
|
||||
+10
-10
@@ -1,14 +1,14 @@
|
||||
# Core Framework
|
||||
fastapi==0.109.1 # Updated: Fixed ReDoS vulnerability (was 0.109.0)
|
||||
uvicorn[standard]==0.27.0
|
||||
pydantic==2.5.3
|
||||
pydantic-settings==2.1.0
|
||||
pydantic==2.12.5
|
||||
pydantic-settings==2.13.1
|
||||
|
||||
# Database
|
||||
sqlalchemy==2.0.25
|
||||
alembic==1.13.1
|
||||
psycopg2-binary==2.9.9
|
||||
asyncpg==0.29.0
|
||||
psycopg2-binary==2.9.11
|
||||
asyncpg==0.31.0
|
||||
|
||||
# Authentication
|
||||
python-jose[cryptography]==3.3.0
|
||||
@@ -18,23 +18,23 @@ authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, a
|
||||
httpx==0.26.0
|
||||
|
||||
# Payment Processing
|
||||
stripe==7.11.0
|
||||
stripe==14.4.1
|
||||
|
||||
# Email & Mail Processing
|
||||
aiosmtplib==3.0.1
|
||||
aiohttp==3.13.3 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
|
||||
aioimaplib==1.0.1
|
||||
aioimaplib==2.0.1
|
||||
email-validator==2.1.0.post1
|
||||
|
||||
# Gmail API (for direct email injection)
|
||||
google-api-python-client==2.193.0
|
||||
google-auth==2.49.1
|
||||
google-auth-oauthlib==1.2.0
|
||||
google-auth-httplib2==0.2.0
|
||||
google-auth-httplib2==0.3.0
|
||||
|
||||
# Job Queue & Cache
|
||||
celery==5.3.6
|
||||
redis==5.0.1
|
||||
celery==5.6.2
|
||||
redis==7.3.0
|
||||
|
||||
# Security & Encryption
|
||||
cryptography==46.0.5 # Updated: Fixed NULL pointer dereference (was 42.0.0)
|
||||
@@ -55,4 +55,4 @@ faker==22.6.0
|
||||
# Utilities
|
||||
python-dotenv==1.0.0
|
||||
schedule==1.2.0
|
||||
tenacity==8.2.3
|
||||
tenacity==9.1.4
|
||||
|
||||
Reference in New Issue
Block a user