From 5a8f73205d8e6856203c356d3769f14b6d58b4fe Mon Sep 17 00:00:00 2001 From: DavidHernan3 Date: Sat, 8 Aug 2026 19:09:34 +0200 Subject: [PATCH] fix(security): refresh vulnerable runtime dependencies --- api/requirements.txt | 2 +- package-lock.json | 12 ++++++------ pyproject.toml | 2 +- worker/requirements.txt | 6 +++--- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/api/requirements.txt b/api/requirements.txt index 16e1b4a..58ca10a 100644 --- a/api/requirements.txt +++ b/api/requirements.txt @@ -3,7 +3,7 @@ uvicorn[standard]==0.51.0 pydantic==2.13.4 python-multipart==0.0.31 PyJWT==2.13.0 -cryptography==49.0.0 +cryptography==50.0.0 docker==7.0.0 psutil==5.9.8 PyYAML==6.0.1 diff --git a/package-lock.json b/package-lock.json index c8498f0..4a6193a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3288,9 +3288,9 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.8", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", - "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", + "version": "5.0.9", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", + "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", "dev": true, "license": "MIT", "dependencies": { @@ -5175,9 +5175,9 @@ } }, "node_modules/nanoid": { - "version": "3.3.16", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz", - "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "funding": [ { "type": "github", diff --git a/pyproject.toml b/pyproject.toml index 0141b3c..1e1826c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -51,7 +51,7 @@ dependencies = [ "pydantic>=2.13.4", "python-multipart>=0.0.31", "PyJWT>=2.13.0", - "cryptography>=49.0.0", + "cryptography>=50.0.0", "docker>=7.0.0", "psutil>=5.9.8", "pyyaml>=6.0.1", diff --git a/worker/requirements.txt b/worker/requirements.txt index 0e43381..d835671 100644 --- a/worker/requirements.txt +++ b/worker/requirements.txt @@ -1,6 +1,6 @@ -cryptography==49.0.0 \ - --hash=sha256:cbc77da8c523d5abd028635ba850a6966fcee2c82e2bf65a41d1d8afe0f98be9 \ - --hash=sha256:ccac2bfebc306b862133e3bb71f3f6ee8bb525240089b2d952e4144b3a6d5da7 +cryptography==50.0.0 \ + --hash=sha256:82148ec5bddac30b51a5b3c1945075f896fa022cb93f8e4a01e9f6ee95292c5f \ + --hash=sha256:07949c449a1abcf60d1ee6e88956d89404c7df3c8258f46589e912988e551987 cffi==2.1.0 \ --hash=sha256:aa7a1b53a2a4452ada2d1b5dade9960b2522f1e61293a811a077439e39029565 \ --hash=sha256:88023dfe18799507b73f1dbb0d14326a17465de1bc9c9c7655c22845e9ddc3a2