From 9d2914eb28b7813b5ce715f0e1957f58192aa70c Mon Sep 17 00:00:00 2001 From: Deepthi Buchupalli Date: Fri, 19 Jun 2026 11:36:41 +0530 Subject: [PATCH 1/4] fix: update black to >=26.3.1 to resolve CVE-2026-32274 vulnerability --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 2e5755a..4fbdb5e 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -27,7 +27,7 @@ dependencies = [ dev = [ "pytest>=7.4.0", "pytest-asyncio>=0.21.0", - "black>=23.0.0", + "black>=26.3.1", "ruff>=0.1.0", ] From 23202d7f3f348d54a7b95e34ec3ee5de7c59c393 Mon Sep 17 00:00:00 2001 From: Deepthit-23 Date: Fri, 19 Jun 2026 11:53:19 +0530 Subject: [PATCH 2/4] fix: support seed and interval validation in synthetic event generator --- utils/synthetic_event_generator.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/utils/synthetic_event_generator.py b/utils/synthetic_event_generator.py index 4cfe235..771b58f 100644 --- a/utils/synthetic_event_generator.py +++ b/utils/synthetic_event_generator.py @@ -18,7 +18,11 @@ def generate_event( event_type: Optional[str] = None, person_id: Optional[int] = None, timestamp: Optional[datetime] = None, + seed: Optional[int] = None, ) -> Dict[str, Any]: + if seed is not None: + random.seed(seed) + if event_type is None: event_type = random.choice(EVENT_TYPES) @@ -86,6 +90,9 @@ def generate_events( if count <= 0: raise ValueError("count must be greater than 0") + if interval_seconds <= 0: + raise ValueError("interval_seconds must be greater than 0") + if start_time is None: start_time = datetime.now(timezone.utc) From 806dceb7bdb99c43e306c8e74f965fcd16783930 Mon Sep 17 00:00:00 2001 From: Deepthit-23 Date: Fri, 19 Jun 2026 11:54:05 +0530 Subject: [PATCH 3/4] fix: bump black to 26.3.1 in services/detection/requirements.txt to resolve CVE-2026-32274 vulnerability --- services/detection/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/detection/requirements.txt b/services/detection/requirements.txt index df60c3b..9dae4ce 100644 --- a/services/detection/requirements.txt +++ b/services/detection/requirements.txt @@ -5,5 +5,5 @@ supervision==0.20.0 pydantic==2.6.4 pytest==8.1.1 ruff==0.4.1 -black==24.3.0 +black==26.3.1 EOF From fe9a836b2ddc9f4b4cb3b1b5dc7aab7e9d39b791 Mon Sep 17 00:00:00 2001 From: Deepthit-23 Date: Sat, 20 Jun 2026 22:59:29 +0530 Subject: [PATCH 4/4] fix: upgrade starlette to 1.2.1 in poetry.lock to resolve CVE-2026-54283 vulnerability --- poetry.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/poetry.lock b/poetry.lock index cfdeac0..3661b31 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2218,14 +2218,14 @@ files = [ [[package]] name = "starlette" -version = "1.0.0" +version = "1.2.1" description = "The little ASGI library that shines." optional = false python-versions = ">=3.10" groups = ["main"] files = [ - {file = "starlette-1.0.0-py3-none-any.whl", hash = "sha256:d3ec55e0bb321692d275455ddfd3df75fff145d009685eb40dc91fc66b03d38b"}, - {file = "starlette-1.0.0.tar.gz", hash = "sha256:6a4beaf1f81bb472fd19ea9b918b50dc3a77a6f2e190a12954b25e6ed5eea149"}, + {file = "starlette-1.2.1-py3-none-any.whl", hash = "sha256:4de0082d08c8f6764a85a54cf1120d6939507a19905c7768acad2a9f875d2b89"}, + {file = "starlette-1.2.1.tar.gz", hash = "sha256:64d55b0a3c26786a4e3268593450e64c20f121d5c5898d022b79373977759d57"}, ] [package.dependencies]