From 6a1ecb592735838062fdbb31e8002cfe392ea502 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 29 Apr 2026 06:02:39 +0000
Subject: [PATCH 1/2] chore(deps): update dependency requests to ~=2.33.0
 [security]

---
 backend/pyproject.toml | 2 +-
 backend/uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 0b72083..cc93ddc 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -10,7 +10,7 @@ dependencies = [
     "line-bot-sdk~=3.22.0",
     "pydantic~=2.12.3",
     "pyyaml~=6.0.2",
-    "requests~=2.32.4",
+    "requests~=2.33.0",
     "uvicorn~=0.40.0",
     "websockets~=15.0.1",
     "yt-dlp==2026.2.21",
diff --git a/backend/uv.lock b/backend/uv.lock
index d4b5d85..21997ec 100644
--- a/backend/uv.lock
+++ b/backend/uv.lock
@@ -129,7 +129,7 @@ requires-dist = [
     { name = "line-bot-sdk", specifier = "~=3.22.0" },
     { name = "pydantic", specifier = "~=2.12.3" },
     { name = "pyyaml", specifier = "~=6.0.2" },
-    { name = "requests", specifier = "~=2.32.4" },
+    { name = "requests", specifier = "~=2.33.0" },
     { name = "uvicorn", specifier = "~=0.40.0" },
     { name = "websockets", specifier = "~=15.0.1" },
     { name = "yt-dlp", specifier = "==2026.2.21" },
@@ -512,7 +512,7 @@ wheels = [
 
 [[package]]
 name = "requests"
-version = "2.32.4"
+version = "2.33.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "certifi" },
@@ -520,9 +520,9 @@ dependencies = [
     { name = "idna" },
     { name = "urllib3" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/e1/0a/929373653770d8a0d7ea76c37de6e41f11eb07559b103b1c02cafb3f7cf8/requests-2.32.4.tar.gz", hash = "sha256:27d0316682c8a29834d3264820024b62a36942083d52caf2f14c0591336d3422", size = 135258, upload-time = "2025-06-09T16:43:07.34Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5f/a4/98b9c7c6428a668bf7e42ebb7c79d576a1c3c1e3ae2d47e674b468388871/requests-2.33.1.tar.gz", hash = "sha256:18817f8c57c6263968bc123d237e3b8b08ac046f5456bd1e307ee8f4250d3517", size = 134120, upload-time = "2026-03-30T16:09:15.531Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/7c/e4/56027c4a6b4ae70ca9de302488c5ca95ad4a39e190093d6c1a8ace08341b/requests-2.32.4-py3-none-any.whl", hash = "sha256:27babd3cda2a6d50b30443204ee89830707d396671944c998b5975b031ac2b2c", size = 64847, upload-time = "2025-06-09T16:43:05.728Z" },
+    { url = "https://files.pythonhosted.org/packages/d7/8e/7540e8a2036f79a125c1d2ebadf69ed7901608859186c856fa0388ef4197/requests-2.33.1-py3-none-any.whl", hash = "sha256:4e6d1ef462f3626a1f0a0a9c42dd93c63bad33f9f1c1937509b8c5c8718ab56a", size = 64947, upload-time = "2026-03-30T16:09:13.83Z" },
 ]
 
 [[package]]

From 83f88a2c891b9c049cc5fcd2f3d4ee0e3fd08c14 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 29 Apr 2026 06:02:54 +0000
Subject: [PATCH 2/2] chore(deps): sync backend requirements.txt with uv.lock

Auto-generated by GitHub Actions from uv export
---
 backend/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index 9fb4fad..27d6b84 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -74,7 +74,7 @@ python-dateutil==2.9.0.post0
     # via line-bot-sdk
 pyyaml==6.0.2
     # via cartunes
-requests==2.32.4
+requests==2.33.1
     # via
     #   cartunes
     #   line-bot-sdk