Skip to content

fix: upgrade dependencies to address security vulnerabilities#79

Merged
ddulic merged 3 commits intomainfrom
fix-security-vulnerabilities
Apr 2, 2026
Merged

fix: upgrade dependencies to address security vulnerabilities#79
ddulic merged 3 commits intomainfrom
fix-security-vulnerabilities

Conversation

@ddulic
Copy link
Copy Markdown
Owner

@ddulic ddulic commented Apr 2, 2026

This PR upgrades several dependencies to address security vulnerabilities:

  • aiohttp: 3.13.3 → 3.13.4 (fixes CVE-2026-34525, CVE-2026-34520, CVE-2026-34519)
  • requests: 2.32.5 → 2.33.1
  • google-genai: 1.67.0 → 1.70.0
  • mcp: 1.26.0 → 1.27.0
  • mistralai: 2.0.0 → 2.2.0
  • Pillow: 12.1.1 → 12.2.0
  • numpy: 2.4.1 → 2.4.4
  • SQLAlchemy: 2.0.46 → 2.0.48

All tests pass successfully.

ddulic and others added 3 commits April 2, 2026 20:57
- Upgrade aiohttp from 3.13.3 to 3.13.4 (CVE-2026-34525, CVE-2026-34520, CVE-2026-34519)
- Upgrade requests from 2.32.5 to 2.33.1
- Upgrade google-genai from 1.67.0 to 1.70.0
- Upgrade mcp from 1.26.0 to 1.27.0
- Upgrade mistralai from 2.0.0 to 2.2.0
- Upgrade Pillow from 12.1.1 to 12.2.0
- Upgrade numpy from 2.4.1 to 2.4.4
- Upgrade SQLAlchemy from 2.0.46 to 2.0.48
@ddulic ddulic merged commit 3dd6d15 into main Apr 2, 2026
@ddulic ddulic deleted the fix-security-vulnerabilities branch April 2, 2026 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant