security: update python-multipart and starlette to fix high-severity vulnerabilities
Some checks failed
CLI Tests / test-cli (push) Successful in 14s
Cross-Node Transaction Testing / transaction-test (push) Successful in 2s
Deploy to Testnet / deploy-testnet (push) Successful in 1m12s
Multi-Node Stress Testing / stress-test (push) Has been cancelled
Node Failover Simulation / failover-test (push) Has been cancelled
Integration Tests / test-service-integration (push) Successful in 8m54s
Package Tests / Python package - aitbc-agent-sdk (push) Failing after 30s
Package Tests / Python package - aitbc-core (push) Successful in 13s
Package Tests / Python package - aitbc-crypto (push) Successful in 9s
Package Tests / Python package - aitbc-sdk (push) Successful in 10s
Package Tests / JavaScript package - aitbc-sdk-js (push) Successful in 6s
Package Tests / JavaScript package - aitbc-token (push) Successful in 15s
Python Tests / test-python (push) Has been cancelled
Security Scanning / security-scan (push) Successful in 30s

- Updated python-multipart from >=0.0.24 to >=0.0.27 (fixes 3 DoS alerts)
- Updated starlette from >=0.27.0 to >=0.49.1 (fixes 1 O(n^2) DoS alert)
- Updated in requirements.txt, pyproject.toml, coordinator-api requirements, aitbc-core

This addresses 4 of the 11 high-severity security vulnerabilities reported by GitHub Dependabot.
This commit is contained in:
aitbc
2026-05-09 20:55:36 +02:00
parent a9adcc17b7
commit d26d937fb1
4 changed files with 6 additions and 6 deletions

View File

@@ -15,7 +15,7 @@ dependencies = [
"redis>=5.0.0",
"pydantic>=2.5.0",
"structlog>=23.0.0",
"starlette>=0.27.0",
"starlette>=0.49.1",
]
[build-system]