From fdc87218af75276444451cf0d268900db2bf4d7b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 16:09:08 +0200 Subject: [PATCH] chore(deps): bump python-multipart from 0.0.28 to 0.0.29 in /backend (#257) Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.28 to 0.0.29. - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.28...0.0.29) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.29 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 90fada5..02c800a 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -14,7 +14,7 @@ asyncpg==0.31.0 python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0) bcrypt==5.0.0 -python-multipart==0.0.28 # Updated: Fixed multiple vulnerabilities (was 0.0.6) +python-multipart==0.0.29 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.6.12 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6) httpx==0.28.1