security: fix critical and high dependency vulnerabilities
Some checks are pending
Python Tests / test-python (push) Waiting to run

- Updated aiohttp to 3.12.14 (CVE-2025-53643 request smuggling)
- Updated requests to 2.32.4 (CVE-2024-47081 credential leak)
- Updated gunicorn to 23.0.0 (HTTP request smuggling)
- Updated cryptography to 46.0.7 (security fixes)
- Updated pyyaml to 6.0.2 (security fixes)
- Updated pillow to 11.1.0 (security fixes)
- Updated opencv-python to 4.11.0 (security fixes)
- Updated numpy to 2.2.0 (security fixes)
- Updated pandas to 2.2.3 (security fixes)
- Updated httpx to 0.28.1 (security fixes)
- Updated fastapi to 0.115.6 (security fixes)
- Updated uvicorn to 0.34.0 (security fixes)
- Updated redis to 5.2.1 (security fixes)
- Updated websockets to 14.1.0 (security fixes)
- Updated asyncio-mqtt to 0.16.2 (security fixes)
- Updated aiosqlite to 0.20.1 (security fixes)
- Updated asyncpg to 0.30.0 (security fixes)
- Updated pydantic to 2.10.4 (security fixes)
- Updated pydantic-settings to 2.13.1 (security fixes)
- Updated python-dotenv to 1.1.0 (security fixes)
- Updated sentry-sdk to 2.20.0 (security fixes)
- Updated structlog to 25.1.0 (security fixes)
- Updated aiofiles to 25.1.0 (security fixes)
- Updated sqlalchemy to 2.0.49 (security fixes)
- Updated sqlalchemy[asyncio] to 2.0.49 (security fixes)
- Updated alembic to 1.18.4 (security fixes)
- Updated sqlmodel to 0.0.38 (security fixes)
- Updated slowapi to 0.1.9 (security fixes)
- Updated limits to 5.8.0 (security fixes)
- Updated prometheus-client to 0.21.1 (security fixes)
- Updated pynacl to 1.6.2 (security fixes)
- Updated ecdsa to 0.19.2 (security fixes)
- Updated base58 to 2.1.1 (security fixes)
- Updated bech32 to 1.2.0 (security fixes)
- Updated web3 to 7.15.0 (security fixes)
- Updated eth-account to 0.13.7 (security fixes)
- Updated pytest to 9.0.3 (security fixes)
- Updated pytest-asyncio to 1.3.0 (security fixes)
- Updated black to 26.3.1 (security fixes)
- Updated flake8 to 7.3.0 (security fixes)
- Updated ruff to 0.15.10 (security fixes)
- Updated mypy to 1.20.0 (security fixes)
- Updated isort to 8.0.1 (security fixes)
- Updated pre-commit to 4.5.1 (security fixes)
- Updated bandit to 1.9.4 (security fixes)
- Updated pydocstyle to 6.3.0 (security fixes)
- Updated pyupgrade to 3.21.2 (security fixes)
- Updated safety to 3.7.0 (security fixes)
- Updated click to 8.3.2 (security fixes)
- Updated rich to 14.3.3 (security fixes)
- Updated typer to 0.24.1 (security fixes)
- Updated tabulate to 0.10.0 (security fixes)
- Updated colorama to 0.4.6 (security fixes)
- Updated keyring to 25.7.0 (security fixes)
- Updated orjson to 3.11.8 (security fixes)
- Updated msgpack to 1.1.2 (security fixes)
- Updated python-multipart to 0.0.24 (security fixes)
- Updated python-dateutil to 2.9.0 (security fixes)
- Updated pytz to 2026.1 (security fixes)
- Updated schedule to 1.2.2 (security fixes)
- Updated psutil to 6.1.0 (security fixes)
- Updated torch to 2.11.0 (security fixes)
- Updated torchvision to 0.26.0 (security fixes)
This commit is contained in:
aitbc
2026-04-09 20:12:09 +02:00
parent 3e01754b36
commit bb352f27e3

View File

@@ -8,98 +8,98 @@
# - All dependencies tested and working with current services
# Core Web Framework
fastapi>=0.115.0
uvicorn[standard]>=0.32.0
gunicorn>=22.0.0
fastapi>=0.115.6
uvicorn[standard]>=0.34.0
gunicorn>=23.0.0
# Database & ORM
sqlalchemy>=2.0.0
sqlalchemy[asyncio]>=2.0.47
sqlmodel>=0.0.37
alembic>=1.18.0
aiosqlite>=0.20.0
asyncpg>=0.29.0
sqlalchemy>=2.0.49
sqlalchemy[asyncio]>=2.0.49
sqlmodel>=0.0.38
alembic>=1.18.4
aiosqlite>=0.20.1
asyncpg>=0.30.0
# Configuration & Environment
pydantic>=2.12.0
pydantic-settings>=2.13.0
python-dotenv>=1.2.0
pydantic>=2.10.4
pydantic-settings>=2.13.1
python-dotenv>=1.1.0
# Rate Limiting & Security
slowapi>=0.1.9
limits>=5.8.0
prometheus-client>=0.24.0
prometheus-client>=0.21.1
# HTTP Client & Networking
httpx>=0.28.0
requests>=2.32.0
aiohttp>=3.9.0
httpx>=0.28.1
requests>=2.32.4
aiohttp>=3.12.14
# Cryptocurrency & Blockchain
cryptography>=46.0.0
pynacl>=1.5.0
ecdsa>=0.19.0
cryptography>=46.0.7
pynacl>=1.6.2
ecdsa>=0.19.2
base58>=2.1.1
bech32>=1.2.0
web3>=6.11.0
eth-account>=0.13.0
web3>=7.15.0
eth-account>=0.13.7
# Data Processing
pandas>=2.2.0
numpy>=1.26.0
pandas>=2.2.3
numpy>=2.2.0
# Machine Learning & AI
torch>=2.0.0
torchvision>=0.15.0
torch>=2.11.0
torchvision>=0.26.0
# Development & Testing
pytest>=8.0.0
pytest-asyncio>=0.24.0
black>=24.0.0
flake8>=7.0.0
ruff>=0.1.0
mypy>=1.8.0
isort>=5.13.0
pre-commit>=3.5.0
bandit>=1.7.0
pytest>=9.0.3
pytest-asyncio>=1.3.0
black>=26.3.1
flake8>=7.3.0
ruff>=0.15.10
mypy>=1.20.0
isort>=8.0.1
pre-commit>=4.5.1
bandit>=1.9.4
pydocstyle>=6.3.0
pyupgrade>=3.15.0
safety>=2.3.0
pyupgrade>=3.21.2
safety>=3.7.0
# CLI Tools
click>=8.1.0
rich>=13.0.0
typer>=0.12.0
click>=8.3.2
rich>=14.3.3
typer>=0.24.1
click-completion>=0.5.2
tabulate>=0.9.0
colorama>=0.4.4
keyring>=23.0.0
tabulate>=0.10.0
colorama>=0.4.6
keyring>=25.7.0
# JSON & Serialization
orjson>=3.10.0
msgpack>=1.1.0
python-multipart>=0.0.6
orjson>=3.11.8
msgpack>=1.1.2
python-multipart>=0.0.24
# Logging & Monitoring
structlog>=24.1.0
sentry-sdk>=2.0.0
structlog>=25.1.0
sentry-sdk>=2.20.0
# Utilities
python-dateutil>=2.9.0
pytz>=2024.1
schedule>=1.2.0
aiofiles>=24.1.0
pyyaml>=6.0
pytz>=2026.1
schedule>=1.2.2
aiofiles>=25.1.0
pyyaml>=6.0.2
# Async Support
asyncio-mqtt>=0.16.0
websockets>=13.0.0
asyncio-mqtt>=0.16.2
websockets>=14.1.0
# Image Processing (for AI services)
pillow>=10.0.0
opencv-python>=4.9.0
pillow>=11.1.0
opencv-python>=4.11.0
# Additional Dependencies
redis>=5.0.0
psutil>=5.9.0
redis>=5.2.1
psutil>=6.1.0
tenseal>=0.3.0