Files
gh-christianlouis-inboxconv…/backend/requirements.txt
T
Christian Krakau-Louis 7503316435 Merge pull request #156 from christianlouis/dependabot/pip/backend/email-validator-2.3.0
chore(deps): bump email-validator from 2.1.0.post1 to 2.3.0 in /backend
2026-04-07 11:43:14 +02:00

60 lines
1.5 KiB
Plaintext

# Core Framework
fastapi==0.135.2 # Updated: Fixed starlette DoS vulnerabilities (was 0.109.1); pulls in starlette>=1.0.0
uvicorn[standard]==0.43.0
pydantic==2.12.5
pydantic-settings==2.13.1
# Database
sqlalchemy==2.0.48 # Updated: Fixed Python 3.14 incompatibility with TypingOnly assertion (was 2.0.25)
alembic==1.18.4
psycopg2-binary==2.9.11
asyncpg==0.31.0
# Authentication
python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0)
bcrypt==5.0.0
python-multipart==0.0.24 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
httpx==0.28.1
# Payment Processing
stripe==15.0.1
# Email & Mail Processing
aiosmtplib==5.1.0
aiohttp==3.13.4 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
aioimaplib==2.0.1
email-validator==2.3.0
# Gmail API (for direct email injection)
google-api-python-client==2.193.0
google-auth==2.49.1
google-auth-oauthlib==1.3.1
google-auth-httplib2==0.3.0
# Job Queue & Cache
celery==5.6.3
redis==7.4.0
# Security & Encryption
cryptography==46.0.6 # Updated: Fixed NULL pointer dereference (was 42.0.0)
# Notifications
apprise==1.9.9
# Monitoring & Logging
prometheus-client==0.24.1
python-json-logger==2.0.7
# Development & Testing
pytest==9.0.2
pytest-asyncio==1.3.0
pytest-cov==4.1.0
faker==40.12.0
# Utilities
python-dotenv==1.2.2
schedule==1.2.0
tenacity==9.1.4