dependabot[bot]
cde645844c
Bumps the pip group with 2 updates in the / directory: [python-dotenv](https://github.com/theskumar/python-dotenv) and [authlib](https://github.com/authlib/authlib). Updates `python-dotenv` from 1.0.0 to 1.2.2 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.2.2) Updates `authlib` from 1.6.9 to 1.6.12 - [Release notes](https://github.com/authlib/authlib/releases) - [Changelog](https://github.com/authlib/authlib/blob/1.6.12/docs/changelog.rst) - [Commits](https://github.com/authlib/authlib/compare/v1.6.9...1.6.12) --- updated-dependencies: - dependency-name: authlib dependency-version: 1.6.11 dependency-type: direct:production - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
60 lines
1.5 KiB
Plaintext
60 lines
1.5 KiB
Plaintext
# Core Framework
|
|
fastapi==0.135.3 # Updated: Fixed starlette DoS vulnerabilities (was 0.109.1); pulls in starlette>=1.0.0
|
|
uvicorn[standard]==0.43.0
|
|
pydantic==2.13.4
|
|
pydantic-settings==2.13.1
|
|
|
|
# Database
|
|
sqlalchemy==2.0.49 # Updated: Fixed Python 3.14 incompatibility with TypingOnly assertion (was 2.0.25)
|
|
alembic==1.18.4
|
|
psycopg2-binary==2.9.11
|
|
asyncpg==0.31.0
|
|
|
|
# Authentication
|
|
|
|
python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0)
|
|
bcrypt==5.0.0
|
|
python-multipart==0.0.28 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
|
|
authlib==1.6.12 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
|
|
httpx==0.28.1
|
|
|
|
# Payment Processing
|
|
stripe==15.0.1
|
|
|
|
# Email & Mail Processing
|
|
aiosmtplib==5.1.0
|
|
aiohttp==3.13.5 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
|
|
aioimaplib==2.0.1
|
|
email-validator==2.3.0
|
|
|
|
# Gmail API (for direct email injection)
|
|
google-api-python-client==2.193.0
|
|
google-auth==2.52.0
|
|
google-auth-oauthlib==1.3.1
|
|
google-auth-httplib2==0.4.0
|
|
|
|
# Job Queue & Cache
|
|
celery==5.6.3
|
|
redis==7.4.0
|
|
|
|
# Security & Encryption
|
|
cryptography==46.0.7 # Updated: Fixed NULL pointer dereference (was 42.0.0)
|
|
|
|
# Notifications
|
|
apprise==1.9.9
|
|
|
|
# Monitoring & Logging
|
|
prometheus-client==0.25.0
|
|
python-json-logger==2.0.7
|
|
|
|
# Development & Testing
|
|
pytest==9.0.3
|
|
pytest-asyncio==1.3.0
|
|
pytest-cov==7.1.0
|
|
faker==40.12.0
|
|
|
|
# Utilities
|
|
python-dotenv==1.2.2
|
|
schedule==1.2.2
|
|
tenacity==9.1.4
|