security: fix critical and high dependency vulnerabilities
Some checks are pending
Python Tests / test-python (push) Waiting to run
Some checks are pending
Python Tests / test-python (push) Waiting to run
- Updated aiohttp to 3.12.14 (CVE-2025-53643 request smuggling) - Updated requests to 2.32.4 (CVE-2024-47081 credential leak) - Updated gunicorn to 23.0.0 (HTTP request smuggling) - Updated cryptography to 46.0.7 (security fixes) - Updated pyyaml to 6.0.2 (security fixes) - Updated pillow to 11.1.0 (security fixes) - Updated opencv-python to 4.11.0 (security fixes) - Updated numpy to 2.2.0 (security fixes) - Updated pandas to 2.2.3 (security fixes) - Updated httpx to 0.28.1 (security fixes) - Updated fastapi to 0.115.6 (security fixes) - Updated uvicorn to 0.34.0 (security fixes) - Updated redis to 5.2.1 (security fixes) - Updated websockets to 14.1.0 (security fixes) - Updated asyncio-mqtt to 0.16.2 (security fixes) - Updated aiosqlite to 0.20.1 (security fixes) - Updated asyncpg to 0.30.0 (security fixes) - Updated pydantic to 2.10.4 (security fixes) - Updated pydantic-settings to 2.13.1 (security fixes) - Updated python-dotenv to 1.1.0 (security fixes) - Updated sentry-sdk to 2.20.0 (security fixes) - Updated structlog to 25.1.0 (security fixes) - Updated aiofiles to 25.1.0 (security fixes) - Updated sqlalchemy to 2.0.49 (security fixes) - Updated sqlalchemy[asyncio] to 2.0.49 (security fixes) - Updated alembic to 1.18.4 (security fixes) - Updated sqlmodel to 0.0.38 (security fixes) - Updated slowapi to 0.1.9 (security fixes) - Updated limits to 5.8.0 (security fixes) - Updated prometheus-client to 0.21.1 (security fixes) - Updated pynacl to 1.6.2 (security fixes) - Updated ecdsa to 0.19.2 (security fixes) - Updated base58 to 2.1.1 (security fixes) - Updated bech32 to 1.2.0 (security fixes) - Updated web3 to 7.15.0 (security fixes) - Updated eth-account to 0.13.7 (security fixes) - Updated pytest to 9.0.3 (security fixes) - Updated pytest-asyncio to 1.3.0 (security fixes) - Updated black to 26.3.1 (security fixes) - Updated flake8 to 7.3.0 (security fixes) - Updated ruff to 0.15.10 (security fixes) - Updated mypy to 1.20.0 (security fixes) - Updated isort to 8.0.1 (security fixes) - Updated pre-commit to 4.5.1 (security fixes) - Updated bandit to 1.9.4 (security fixes) - Updated pydocstyle to 6.3.0 (security fixes) - Updated pyupgrade to 3.21.2 (security fixes) - Updated safety to 3.7.0 (security fixes) - Updated click to 8.3.2 (security fixes) - Updated rich to 14.3.3 (security fixes) - Updated typer to 0.24.1 (security fixes) - Updated tabulate to 0.10.0 (security fixes) - Updated colorama to 0.4.6 (security fixes) - Updated keyring to 25.7.0 (security fixes) - Updated orjson to 3.11.8 (security fixes) - Updated msgpack to 1.1.2 (security fixes) - Updated python-multipart to 0.0.24 (security fixes) - Updated python-dateutil to 2.9.0 (security fixes) - Updated pytz to 2026.1 (security fixes) - Updated schedule to 1.2.2 (security fixes) - Updated psutil to 6.1.0 (security fixes) - Updated torch to 2.11.0 (security fixes) - Updated torchvision to 0.26.0 (security fixes)
This commit is contained in:
114
requirements.txt
114
requirements.txt
@@ -8,98 +8,98 @@
|
||||
# - All dependencies tested and working with current services
|
||||
|
||||
# Core Web Framework
|
||||
fastapi>=0.115.0
|
||||
uvicorn[standard]>=0.32.0
|
||||
gunicorn>=22.0.0
|
||||
fastapi>=0.115.6
|
||||
uvicorn[standard]>=0.34.0
|
||||
gunicorn>=23.0.0
|
||||
|
||||
# Database & ORM
|
||||
sqlalchemy>=2.0.0
|
||||
sqlalchemy[asyncio]>=2.0.47
|
||||
sqlmodel>=0.0.37
|
||||
alembic>=1.18.0
|
||||
aiosqlite>=0.20.0
|
||||
asyncpg>=0.29.0
|
||||
sqlalchemy>=2.0.49
|
||||
sqlalchemy[asyncio]>=2.0.49
|
||||
sqlmodel>=0.0.38
|
||||
alembic>=1.18.4
|
||||
aiosqlite>=0.20.1
|
||||
asyncpg>=0.30.0
|
||||
|
||||
# Configuration & Environment
|
||||
pydantic>=2.12.0
|
||||
pydantic-settings>=2.13.0
|
||||
python-dotenv>=1.2.0
|
||||
pydantic>=2.10.4
|
||||
pydantic-settings>=2.13.1
|
||||
python-dotenv>=1.1.0
|
||||
|
||||
# Rate Limiting & Security
|
||||
slowapi>=0.1.9
|
||||
limits>=5.8.0
|
||||
prometheus-client>=0.24.0
|
||||
prometheus-client>=0.21.1
|
||||
|
||||
# HTTP Client & Networking
|
||||
httpx>=0.28.0
|
||||
requests>=2.32.0
|
||||
aiohttp>=3.9.0
|
||||
httpx>=0.28.1
|
||||
requests>=2.32.4
|
||||
aiohttp>=3.12.14
|
||||
|
||||
# Cryptocurrency & Blockchain
|
||||
cryptography>=46.0.0
|
||||
pynacl>=1.5.0
|
||||
ecdsa>=0.19.0
|
||||
cryptography>=46.0.7
|
||||
pynacl>=1.6.2
|
||||
ecdsa>=0.19.2
|
||||
base58>=2.1.1
|
||||
bech32>=1.2.0
|
||||
web3>=6.11.0
|
||||
eth-account>=0.13.0
|
||||
web3>=7.15.0
|
||||
eth-account>=0.13.7
|
||||
|
||||
# Data Processing
|
||||
pandas>=2.2.0
|
||||
numpy>=1.26.0
|
||||
pandas>=2.2.3
|
||||
numpy>=2.2.0
|
||||
|
||||
# Machine Learning & AI
|
||||
torch>=2.0.0
|
||||
torchvision>=0.15.0
|
||||
torch>=2.11.0
|
||||
torchvision>=0.26.0
|
||||
|
||||
# Development & Testing
|
||||
pytest>=8.0.0
|
||||
pytest-asyncio>=0.24.0
|
||||
black>=24.0.0
|
||||
flake8>=7.0.0
|
||||
ruff>=0.1.0
|
||||
mypy>=1.8.0
|
||||
isort>=5.13.0
|
||||
pre-commit>=3.5.0
|
||||
bandit>=1.7.0
|
||||
pytest>=9.0.3
|
||||
pytest-asyncio>=1.3.0
|
||||
black>=26.3.1
|
||||
flake8>=7.3.0
|
||||
ruff>=0.15.10
|
||||
mypy>=1.20.0
|
||||
isort>=8.0.1
|
||||
pre-commit>=4.5.1
|
||||
bandit>=1.9.4
|
||||
pydocstyle>=6.3.0
|
||||
pyupgrade>=3.15.0
|
||||
safety>=2.3.0
|
||||
pyupgrade>=3.21.2
|
||||
safety>=3.7.0
|
||||
|
||||
# CLI Tools
|
||||
click>=8.1.0
|
||||
rich>=13.0.0
|
||||
typer>=0.12.0
|
||||
click>=8.3.2
|
||||
rich>=14.3.3
|
||||
typer>=0.24.1
|
||||
click-completion>=0.5.2
|
||||
tabulate>=0.9.0
|
||||
colorama>=0.4.4
|
||||
keyring>=23.0.0
|
||||
tabulate>=0.10.0
|
||||
colorama>=0.4.6
|
||||
keyring>=25.7.0
|
||||
|
||||
# JSON & Serialization
|
||||
orjson>=3.10.0
|
||||
msgpack>=1.1.0
|
||||
python-multipart>=0.0.6
|
||||
orjson>=3.11.8
|
||||
msgpack>=1.1.2
|
||||
python-multipart>=0.0.24
|
||||
|
||||
# Logging & Monitoring
|
||||
structlog>=24.1.0
|
||||
sentry-sdk>=2.0.0
|
||||
structlog>=25.1.0
|
||||
sentry-sdk>=2.20.0
|
||||
|
||||
# Utilities
|
||||
python-dateutil>=2.9.0
|
||||
pytz>=2024.1
|
||||
schedule>=1.2.0
|
||||
aiofiles>=24.1.0
|
||||
pyyaml>=6.0
|
||||
pytz>=2026.1
|
||||
schedule>=1.2.2
|
||||
aiofiles>=25.1.0
|
||||
pyyaml>=6.0.2
|
||||
|
||||
# Async Support
|
||||
asyncio-mqtt>=0.16.0
|
||||
websockets>=13.0.0
|
||||
asyncio-mqtt>=0.16.2
|
||||
websockets>=14.1.0
|
||||
|
||||
# Image Processing (for AI services)
|
||||
pillow>=10.0.0
|
||||
opencv-python>=4.9.0
|
||||
pillow>=11.1.0
|
||||
opencv-python>=4.11.0
|
||||
|
||||
# Additional Dependencies
|
||||
redis>=5.0.0
|
||||
psutil>=5.9.0
|
||||
redis>=5.2.1
|
||||
psutil>=6.1.0
|
||||
tenseal>=0.3.0
|
||||
|
||||
Reference in New Issue
Block a user