fix(deps): resolve all 187 open Dependabot security alerts

app/Dockerfile

@@ -1,20 +1,21 @@
-FROM python:3.9 as requirements-stage
+FROM python:3.12-bookworm AS requirements-stage
 
 WORKDIR /tmp
 
 # Poetry 설치 및 설정
-RUN pip install --no-cache-dir poetry==1.7.1 && \
+# Poetry 2.x: export 명령이 별도 플러그인으로 분리됨 (poetry.lock lock-version 2.1 요구)
+RUN pip install --no-cache-dir poetry==2.4.1 poetry-plugin-export==1.10.0 && \
     poetry config virtualenvs.create false && \
     poetry config installer.max-workers 10
 
 COPY ./pyproject.toml ./poetry.lock* /tmp/
 
 # requirements.txt 생성
-RUN pip install --no-cache-dir torch==2.0.0 && \
+RUN pip install --no-cache-dir torch==2.13.0 && \
     python -m poetry install --no-interaction --no-root && \
     python -m poetry export --format requirements.txt --output requirements.txt --without-hashes
 
-FROM python:3.9-slim
+FROM python:3.12-slim-bookworm
 
 WORKDIR /app
 

app/pyproject.toml

@@ -8,7 +8,7 @@ authors = [
 ]
 license = {text = "MIT"}
 readme = "README.md"
-requires-python = "^3.9"
+requires-python = ">=3.11,<3.14"
 
 [tool.poetry]
 name = "backend-gorani-side-project"
@@ -20,19 +20,34 @@ authors = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.9"
-fastapi = "^0.105.0"
+python = ">=3.11,<3.14"
+fastapi = "^0.141.1"
 sqlalchemy = "^2.0.36"
 openai = "^1.58.1"
 uvicorn = "^0.34.0"
 ultralytics = {version = "^8.3.54", extras = ["cpu"]}
 numpy = "^1.26.4"
-python-multipart = "^0.0.7"
-torch = "2.0.0"
-python-dotenv = "*"
+python-multipart = "^0.0.32"
+torch = "^2.13.0"
+torchvision = "^0.28.0"
+python-dotenv = ">=1.2.2"
+
+# Security floors for transitive dependencies (Dependabot alerts).
+# Keep until the direct dependents raise their own bounds.
+filelock = ">=3.20.3"
+fonttools = ">=4.60.2"
+h11 = ">=0.16.0"
+idna = ">=3.15"
+jinja2 = ">=3.1.6"
+pillow = ">=12.3.0"
+requests = ">=2.33.0"
+setuptools = ">=83.0.0"
+starlette = ">=1.3.1"
+urllib3 = ">=2.7.0"
+wheel = ">=0.46.2"
 
 [tool.poetry.group.dev.dependencies]
-pytest = "^8.0.0"
+pytest = "^9.0.3"
 
 [[tool.poetry.source]]
 name = "pytorch"

app/requirements.txt

@@ -1,3 +1,4 @@
+annotated-doc==0.0.5
 annotated-types==0.7.0
 anyio==4.7.0
 certifi==2024.12.14
@@ -6,15 +7,15 @@ click==8.1.8
 contourpy==1.3.1
 cycler==0.12.1
 distro==1.9.0
-fastapi==0.115.6
-filelock==3.16.1
-fonttools==4.55.3
+fastapi==0.141.1
+filelock==3.32.2
+fonttools==4.63.0
 fsspec==2024.12.0
-h11==0.14.0
-httpcore==1.0.7
+h11==0.16.0
+httpcore==1.0.9
 httpx==0.28.1
-idna==3.10
-Jinja2==3.1.5
+idna==3.18
+Jinja2==3.1.6
 jiter==0.8.2
 kiwisolver==1.4.8
 MarkupSafe==3.0.2
@@ -26,29 +27,32 @@ openai==1.58.1
 opencv-python==4.10.0.84
 packaging==24.2
 pandas==2.2.3
-pillow==11.0.0
+pillow==12.3.0
 psutil==6.1.1
 py-cpuinfo==9.0.0
 pydantic==2.10.4
 pydantic_core==2.27.2
 pyparsing==3.2.0
 python-dateutil==2.9.0.post0
+python-multipart==0.0.32
 pytz==2024.2
 PyYAML==6.0.2
-requests==2.32.3
+requests==2.34.2
 scipy==1.14.1
 seaborn==0.13.2
+setuptools==83.0.0
 six==1.17.0
 sniffio==1.3.1
 SQLAlchemy==2.0.36
-starlette==0.41.3
-sympy==1.13.1
-torch==2.0.0
-torchvision==0.20.1
+starlette==1.4.1
+sympy==1.13.3
+torch==2.13.0
+torchvision==0.28.0
 tqdm==4.67.1
+typing-inspection==0.4.2
 typing_extensions==4.12.2
 tzdata==2024.2
-ultralytics==8.3.55
 ultralytics-thop==2.0.13
-urllib3==2.3.0
-uvicorn==0.34.0
+ultralytics==8.3.55
+urllib3==2.7.0
+uvicorn==0.34.0