c3e6f683f1
Some checks failed
Cross-Node Transaction Testing / transaction-test (push) Successful in 8s
Deploy to Testnet / deploy-testnet (push) Successful in 1m53s
Multi-Node Stress Testing / stress-test (push) Successful in 3s
Python Tests / test-python (push) Failing after 33s
Build Debian Miner Binary / build-miner (push) Failing after 14m18s
- Update idna from 3.13 to 3.15 (fixes CVE-2026-45409) - Update ujson from 5.12.0 to 5.12.1 (fixes CVE-2026-44660) - Update urllib3 from 2.6.3 to 2.7.0 (fixes CVE-2026-44431, CVE-2026-44432) - Remove vllm (transitive dependency causing diskcache vulnerability) - Remove diskcache (CVE-2025-69872 - no longer required) - Update requirements.txt with secure dependency versions All vulnerabilities now resolved: pip-audit shows no known vulnerabilities found
119 lines
2.3 KiB
Plaintext
119 lines
2.3 KiB
Plaintext
# AITBC Central Virtual Environment Requirements
|
|
# This file contains all Python dependencies for AITBC services
|
|
# Merged from all subdirectory requirements files
|
|
#
|
|
# DEPENDENCY MANAGEMENT:
|
|
# - Source of truth: /opt/aitbc/pyproject.toml
|
|
# - Lock file: /opt/aitbc/poetry.lock
|
|
# - This file is generated from pyproject.toml for CI/CD compatibility
|
|
# - To update: Run `pip-compile pyproject.toml` or manually sync from poetry.lock
|
|
#
|
|
# Recent Updates:
|
|
# - Added bech32>=1.2.0 for blockchain address encoding (2026-03-30)
|
|
# - Fixed duplicate web3 entries and tenseal version
|
|
# - All dependencies tested and working with current services
|
|
# - Cache invalidation for CLI rich dependency (2026-04-19)
|
|
# - Consolidated to root pyproject.toml as single source of truth (2026-04-30)
|
|
|
|
# Core Web Framework
|
|
fastapi>=0.115.6
|
|
uvicorn[standard]>=0.34.0
|
|
gunicorn>=23.0.0
|
|
starlette>=0.49.1
|
|
|
|
# Database & ORM
|
|
sqlalchemy>=2.0.49
|
|
sqlalchemy[asyncio]>=2.0.49
|
|
sqlmodel>=0.0.38
|
|
alembic>=1.18.4
|
|
aiosqlite>=0.20.1
|
|
asyncpg>=0.30.0
|
|
|
|
# Configuration & Environment
|
|
pydantic>=2.10.4
|
|
pydantic-settings>=2.13.1
|
|
python-dotenv>=1.1.0
|
|
|
|
# Rate Limiting & Security
|
|
slowapi>=0.1.9
|
|
limits>=5.8.0
|
|
prometheus-client>=0.21.1
|
|
|
|
# HTTP Client & Networking
|
|
httpx>=0.28.1
|
|
requests>=2.32.4
|
|
aiohttp>=3.12.14
|
|
aiostun>=0.1.0
|
|
urllib3>=2.7.0
|
|
|
|
# Cryptocurrency & Blockchain
|
|
cryptography>=46.0.0
|
|
pynacl>=1.6.2
|
|
base58>=2.1.1
|
|
bech32>=1.2.0
|
|
web3>=7.15.0
|
|
eth-account>=0.13.7
|
|
|
|
# Data Processing
|
|
pandas>=2.2.3
|
|
numpy>=2.2.0
|
|
|
|
# Machine Learning & AI
|
|
torch>=2.11.0
|
|
torchvision>=0.26.0
|
|
|
|
# Development & Testing
|
|
pytest>=9.0.3
|
|
pytest-asyncio>=1.3.0
|
|
pytest-timeout>=2.4.0
|
|
black>=24.0.0
|
|
flake8>=7.3.0
|
|
ruff>=0.15.10
|
|
mypy>=1.20.0
|
|
isort>=8.0.1
|
|
pre-commit>=4.5.1
|
|
bandit>=1.9.4
|
|
pydocstyle>=6.3.0
|
|
pyupgrade>=3.21.2
|
|
safety>=3.7.0
|
|
|
|
# CLI Tools
|
|
click>=8.3.2
|
|
rich>=14.3.3
|
|
typer>=0.24.1
|
|
click-completion>=0.5.2
|
|
tabulate>=0.10.0
|
|
colorama>=0.4.6
|
|
keyring>=25.7.0
|
|
|
|
# JSON & Serialization
|
|
orjson>=3.11.0
|
|
msgpack>=1.1.2
|
|
python-multipart>=0.0.27
|
|
ujson>=5.12.1
|
|
|
|
# Logging & Monitoring
|
|
structlog>=25.1.0
|
|
sentry-sdk>=2.20.0
|
|
|
|
# Utilities
|
|
python-dateutil>=2.9.0
|
|
pytz>=2026.1
|
|
schedule>=1.2.2
|
|
aiofiles>=25.1.0
|
|
pyyaml>=6.0.2
|
|
|
|
# Async Support
|
|
asyncio-mqtt>=0.16.2
|
|
websockets>=14.1.0
|
|
|
|
# Image Processing (for AI services)
|
|
pillow>=11.1.0
|
|
opencv-python>=4.11.0
|
|
|
|
# Additional Dependencies
|
|
redis>=5.2.1
|
|
psutil>=6.1.0
|
|
tenseal>=0.3.0
|
|
idna>=3.15
|