From 7b99c688bd5fbbee26a6ba1f031de3d0c72e140f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 07:17:53 +0000 Subject: [PATCH] chore(deps-pip): bump the pip group across 1 directory with 12 updates Bumps the pip group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.41` | `2.1.6` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.13` | | [flask-wtf](https://github.com/pallets-eco/flask-wtf) | `1.2.2` | `1.3.0` | | [wtforms](https://github.com/pallets-eco/wtforms) | `3.2.1` | `3.2.2` | | [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.4` | | [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` | | [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.2` | | [py7zr](https://github.com/miurahr/py7zr) | `1.1.3` | `1.1.4` | | [flask-socketio](https://code.miguelgrinberg.com/miguelgrinberg/flask-socketio) | `5.6.1` | `5.7.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `26.2.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | Updates `sqlalchemy` from 2.0.41 to 2.1.6 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `psycopg2-binary` from 2.9.10 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/compare/2.9.10...2.9.13) Updates `flask-wtf` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/pallets-eco/flask-wtf/releases) - [Changelog](https://github.com/pallets-eco/flask-wtf/blob/main/docs/changes.rst) - [Commits](https://github.com/pallets-eco/flask-wtf/compare/v1.2.2...v1.3.0) Updates `wtforms` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/pallets-eco/wtforms/releases) - [Changelog](https://github.com/pallets-eco/wtforms/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets-eco/wtforms/compare/3.2.1...3.2.2) Updates `email-validator` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/JoshData/python-email-validator/releases) - [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md) - [Commits](https://github.com/JoshData/python-email-validator/compare/v2.2.0...v2.3.0) Updates `python-dotenv` from 1.2.2 to 1.2.4 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.4) Updates `requests` from 2.33.0 to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.33.0...v2.34.2) Updates `cryptography` from 50.0.0 to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.2) Updates `py7zr` from 1.1.3 to 1.1.4 - [Release notes](https://github.com/miurahr/py7zr/releases) - [Changelog](https://github.com/miurahr/py7zr/blob/master/docs/Changelog.rst) - [Commits](https://github.com/miurahr/py7zr/compare/v1.1.3...v1.1.4) Updates `flask-socketio` from 5.6.1 to 5.7.0 Updates `gunicorn` from 23.0.0 to 26.2.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](https://github.com/benoitc/gunicorn/compare/23.0.0...26.2.0) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1) --- updated-dependencies: - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: email-validator dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: flask-socketio dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: flask-wtf dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: gunicorn dependency-version: 26.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: py7zr dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: python-dotenv dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: sqlalchemy dependency-version: 2.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: wtforms dependency-version: 3.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- requirements.txt | 22 +++++++++++----------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 90eb821..ebcbc72 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -3,7 +3,7 @@ # Testing # pytest >= 9.0.3 (PYSEC-2026-1845 / CVE-2025-71176): the shared # /tmp/pytest-of-{user} directory must not be usable by other local users. -pytest==9.0.3 +pytest==9.1.1 pytest-cov==7.1.0 # Code quality diff --git a/requirements.txt b/requirements.txt index cd9f7c6..9352135 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,28 +9,28 @@ Werkzeug==3.1.9 # Database Flask-SQLAlchemy==3.1.1 Flask-Migrate==4.1.0 -SQLAlchemy==2.0.41 -psycopg2-binary==2.9.10 +SQLAlchemy==2.1.6 +psycopg2-binary==2.9.13 # Authentication Flask-Login==0.6.3 -Flask-WTF==1.2.2 -WTForms==3.2.1 -email-validator==2.2.0 +Flask-WTF==1.3.0 +WTForms==3.2.2 +email-validator==2.3.0 # Utilities # python-dotenv >= 1.2.2 (PYSEC-2026-2270 / CVE-2026-28684): set_key()/ # unset_key() must not follow symlinks when rewriting a .env file. # requests >= 2.33.0 (PYSEC-2026-2275 / CVE-2026-25645): zip extraction must # not reuse a predictable temp-file name. -python-dotenv==1.2.2 -requests==2.33.0 -cryptography==50.0.0 +python-dotenv==1.2.4 +requests==2.34.2 +cryptography==50.0.2 packaging==26.3 # Archive extraction for additional import formats (#90). Both read archives # in memory; rarfile never shells out (only uncompressed RAR entries are read). -py7zr==1.1.3 +py7zr==1.1.4 rarfile==4.5 # Real-time collaboration (issue #50) @@ -38,11 +38,11 @@ rarfile==4.5 # `RequestContext.session`, which Flask 3.1 made read-only, so every Socket.IO # session copy raises AttributeError. 5.6.1 adds the Flask >= 3.1.3 session # fix. This pin must move together with the Flask pin above. -Flask-SocketIO==5.6.1 +Flask-SocketIO==5.7.0 simple-websocket==1.1.0 # Production server -gunicorn==23.0.0 +gunicorn==26.2.0 # Invoice PDF export (issue #483). CSV export works without this dependency; # PDF export imports it lazily.