From 2ed080ec2b9a3a0f3b9b0703bffc9d8b290a9462 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 15:06:19 +0000 Subject: [PATCH] deps: bump the web group across 1 directory with 3 updates Bumps the web group with 3 updates in the / directory: [fastapi](https://github.com/fastapi/fastapi), [starlette](https://github.com/Kludex/starlette) and [uvicorn](https://github.com/Kludex/uvicorn). Updates `fastapi` from 0.136.1 to 0.138.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.136.1...0.138.0) Updates `starlette` from 1.0.1 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.0.1...1.3.1) Updates `uvicorn` from 0.46.0 to 0.49.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.46.0...0.49.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web - dependency-name: starlette dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web - dependency-name: uvicorn dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web ... Signed-off-by: dependabot[bot] --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index f1a5b1b..f18c596 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,9 +1,9 @@ # UATP Capsule Engine Dependencies - Security Hardened 2025 # Web Framework - Updated for security patches -fastapi==0.136.1 -uvicorn[standard]==0.46.0 -starlette==1.0.1 +fastapi==0.138.0 +uvicorn[standard]==0.49.0 +starlette==1.3.1 werkzeug>=3.1.8 # CVE-2024-49767 fix # Database - Latest secure versions