chore: merge dependency updates from PRs #26-#49 and remove CodeQL checks

Backend (Python):
- pydantic 2.5.3 → 2.12.5
- pydantic-settings 2.1.0 → 2.13.1
- psycopg2-binary 2.9.9 → 2.9.11
- asyncpg 0.29.0 → 0.31.0
- stripe 7.11.0 → 14.4.1
- aioimaplib 1.0.1 → 2.0.1
- google-auth-httplib2 0.2.0 → 0.3.0
- celery 5.3.6 → 5.6.2
- redis 5.0.1 → 7.3.0
- tenacity 8.2.3 → 9.1.4

Frontend (npm):
- react 19.2.3 → 19.2.4
- @tanstack/react-query ^5.90.20 → ^5.95.0
- axios ^1.13.5 → ^1.13.6
- zustand ^5.0.11 → ^5.0.12
- eslint ^9 → ^10
- eslint-config-next 16.1.6 → 16.2.1

Docker:
- Python base image 3.11-slim → 3.14-slim

CI/CD:
- actions/setup-python v5 → v6
- actions/setup-node v4 → v6
- docker/setup-buildx-action v3 → v4
- codecov/codecov-action v3 → v5
- Python version 3.11 → 3.14, Node.js 18 → 20
- Removed CodeQL checks (was blocking builds)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/d8a6f888-1c85-4de6-a36d-55e9dcd7489e
This commit is contained in:
copilot-swe-agent[bot]
2026-03-23 12:33:33 +00:00
parent 5f5b4777dd
commit c4d8f392f8
8 changed files with 405 additions and 576 deletions
+1 -1
View File
@@ -1,4 +1,4 @@
FROM python:3.11-slim
FROM python:3.14-slim
# Set working directory
WORKDIR /app
+10 -10
View File
@@ -1,14 +1,14 @@
# Core Framework
fastapi==0.109.1 # Updated: Fixed ReDoS vulnerability (was 0.109.0)
uvicorn[standard]==0.27.0
pydantic==2.5.3
pydantic-settings==2.1.0
pydantic==2.12.5
pydantic-settings==2.13.1
# Database
sqlalchemy==2.0.25
alembic==1.13.1
psycopg2-binary==2.9.9
asyncpg==0.29.0
psycopg2-binary==2.9.11
asyncpg==0.31.0
# Authentication
python-jose[cryptography]==3.3.0
@@ -18,23 +18,23 @@ authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, a
httpx==0.26.0
# Payment Processing
stripe==7.11.0
stripe==14.4.1
# Email & Mail Processing
aiosmtplib==3.0.1
aiohttp==3.13.3 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
aioimaplib==1.0.1
aioimaplib==2.0.1
email-validator==2.1.0.post1
# Gmail API (for direct email injection)
google-api-python-client==2.193.0
google-auth==2.49.1
google-auth-oauthlib==1.2.0
google-auth-httplib2==0.2.0
google-auth-httplib2==0.3.0
# Job Queue & Cache
celery==5.3.6
redis==5.0.1
celery==5.6.2
redis==7.3.0
# Security & Encryption
cryptography==46.0.5 # Updated: Fixed NULL pointer dereference (was 42.0.0)
@@ -55,4 +55,4 @@ faker==22.6.0
# Utilities
python-dotenv==1.0.0
schedule==1.2.0
tenacity==8.2.3
tenacity==9.1.4