From ac6a837522c1dcfee3fdc9b6e9dca2f94460053f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Mar 2026 07:21:53 +0000 Subject: [PATCH] chore(deps): bump uvicorn from 0.27.0 to 0.42.0 in /backend Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.27.0 to 0.42.0. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.27.0...0.42.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 4b07356..7884440 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,6 +1,6 @@ # Core Framework fastapi==0.135.2 # Updated: Fixed starlette DoS vulnerabilities (was 0.109.1); pulls in starlette>=1.0.0 -uvicorn[standard]==0.27.0 +uvicorn[standard]==0.42.0 pydantic==2.12.5 pydantic-settings==2.13.1