diff --git a/requirements/base.txt b/requirements/base.txt index cd1d785..f15966a 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,5 +1,5 @@ fastapi==0.141.1 -uvicorn==0.52.0 +uvicorn==0.52.1 h11>=0.16.0 # Pinned to fix HTTP Request Smuggling vulnerability starlette>=1.3.1 # not directly required, pinned by Snyk to avoid a vulnerability SQLAlchemy==2.0.51 @@ -20,6 +20,6 @@ requests>=2.34.2 # not directly required, pinned by Snyk to avoid a vulnerabilit urllib3>=2.7.0 # not directly required, pinned by Snyk to avoid a vulnerability zipp>=4.1.0 # not directly required, pinned by Snyk to avoid a vulnerability msgpack>=1.2.1 # not directly required, pinned to avoid a vulnerability (GHSA-6v7p-g79w-8964) -setuptools>=78.1.1 # not directly required, pinned to avoid a vulnerability (CVE-2025-47273) +setuptools>=83.0.0 # not directly required, pinned to avoid a vulnerability (CVE-2025-47273) pyspellchecker>=0.9.0 better-profanity==0.7.0 diff --git a/requirements/test.txt b/requirements/test.txt index 1ada669..84ef1af 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -5,8 +5,8 @@ pytest-cov==7.1.0 pytest-html==4.2.0 pytest-metadata==3.1.1 pytest-testmon==2.2.0 # pre-push: run only tests affected by changes -pytest-xdist==3.6.1 +pytest-xdist==3.8.0 Faker==40.36.0 httpx==0.28.1 -coverage==7.15.2 +coverage==7.15.3 python-dateutil==2.9.0.post0