From 17fe60817091eb32eb574aefa1a9b553a2bdd912 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:05:34 +0000 Subject: [PATCH] chore(deps): bump pyasn1 from 0.6.3 to 0.6.4 in /server Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.3 to 0.6.4. - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.3...v0.6.4) --- updated-dependencies: - dependency-name: pyasn1 dependency-version: 0.6.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- server/pyproject.toml | 2 +- server/uv.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/server/pyproject.toml b/server/pyproject.toml index 863ef235..282dec6e 100644 --- a/server/pyproject.toml +++ b/server/pyproject.toml @@ -27,7 +27,7 @@ dependencies = [ # SECURITY: minimum versions per 2026-05-07 audit. "python-dotenv>=1.2.2", # CVE-2026-28684 (transitive from pydantic-settings chain) "mako>=1.3.12", # CVE-2026-44307 (transitive from alembic) - "pyasn1>=0.6.3", # CVE-2026-30922 (transitive from cryptography chain) + "pyasn1>=0.6.4", # CVE-2026-30922 (transitive from cryptography chain) # SECURITY: minimum versions per 2026-05-19 audit. "idna>=3.15", # CVE-2026-45409 (transitive from requests/httpx) "urllib3>=2.7.0", # CVE-2026-44431, CVE-2026-44432 (transitive from requests) diff --git a/server/uv.lock b/server/uv.lock index 43ca6f0f..adf8e7b8 100644 --- a/server/uv.lock +++ b/server/uv.lock @@ -1843,11 +1843,11 @@ sdist = { url = "https://files.pythonhosted.org/packages/44/66/2c17bae31c9066137 [[package]] name = "pyasn1" -version = "0.6.3" +version = "0.6.4" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" }, + { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" }, ] [[package]] @@ -2861,7 +2861,7 @@ requires-dist = [ { name = "pip", marker = "extra == 'dev'", specifier = ">=26.1.2" }, { name = "pip-audit", marker = "extra == 'dev'", specifier = ">=2.6.0" }, { name = "psycopg", extras = ["binary"], specifier = ">=3.1.0" }, - { name = "pyasn1", specifier = ">=0.6.3" }, + { name = "pyasn1", specifier = ">=0.6.4" }, { name = "pydantic", extras = ["email"], specifier = ">=2.0.0" }, { name = "pydantic-settings", specifier = ">=2.14.2" }, { name = "pygments", marker = "extra == 'dev'", specifier = ">=2.20.0" },