From 0570ca95aca5c0a53c4d8fafe1e5b702e547fa4f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 03:06:25 +0000 Subject: [PATCH] Bump the all-dependencies group in /requirements with 3 updates Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn), [setuptools](https://github.com/pypa/setuptools) and [coverage](https://github.com/coveragepy/coveragepy) to permit the latest version. Updates `uvicorn` from 0.52.0 to 0.52.1 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1) Updates `setuptools` to 83.0.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](https://github.com/pypa/setuptools/compare/v78.1.1...v83.0.0) Updates `coverage` from 7.15.2 to 7.15.3 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.15.2...7.15.3) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.52.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: setuptools dependency-version: 83.0.0 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: coverage dependency-version: 7.15.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] --- requirements/base.txt | 4 ++-- requirements/test.txt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index cd1d785..f15966a 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,5 +1,5 @@ fastapi==0.141.1 -uvicorn==0.52.0 +uvicorn==0.52.1 h11>=0.16.0 # Pinned to fix HTTP Request Smuggling vulnerability starlette>=1.3.1 # not directly required, pinned by Snyk to avoid a vulnerability SQLAlchemy==2.0.51 @@ -20,6 +20,6 @@ requests>=2.34.2 # not directly required, pinned by Snyk to avoid a vulnerabilit urllib3>=2.7.0 # not directly required, pinned by Snyk to avoid a vulnerability zipp>=4.1.0 # not directly required, pinned by Snyk to avoid a vulnerability msgpack>=1.2.1 # not directly required, pinned to avoid a vulnerability (GHSA-6v7p-g79w-8964) -setuptools>=78.1.1 # not directly required, pinned to avoid a vulnerability (CVE-2025-47273) +setuptools>=83.0.0 # not directly required, pinned to avoid a vulnerability (CVE-2025-47273) pyspellchecker>=0.9.0 better-profanity==0.7.0 diff --git a/requirements/test.txt b/requirements/test.txt index 07aed23..7c9e387 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -7,5 +7,5 @@ pytest-metadata==3.1.1 pytest-testmon==2.2.0 # pre-push: run only tests affected by changes Faker==40.36.0 httpx==0.28.1 -coverage==7.15.2 +coverage==7.15.3 python-dateutil==2.9.0.post0