Merge pull request #35 from jason810496/copilot/bump-dependencies-alerts

Update dependencies to fix security vulnerabilities from Dependabot alerts

Author: jason810496

backend/requirements.txt

@@ -9,13 +9,13 @@ cffi==1.15.1 ; python_version >= "3.11" and python_version < "4.0"
 charset-normalizer==3.3.2 ; python_version >= "3.11" and python_version < "4.0"
 click==8.1.7 ; python_version >= "3.11" and python_version < "4.0"
 colorama==0.4.6 ; python_version >= "3.11" and python_version < "4.0" and (sys_platform == "win32" or platform_system == "Windows")
-cryptography==41.0.4 ; python_version >= "3.11" and python_version < "4.0"
+cryptography==42.0.8 ; python_version >= "3.11" and python_version < "4.0"
 dnspython==2.4.2 ; python_version >= "3.11" and python_version < "4.0"
 ecdsa==0.18.0 ; python_version >= "3.11" and python_version < "4.0"
 email-validator==2.0.0.post2 ; python_version >= "3.11" and python_version < "4.0"
-fastapi==0.103.1 ; python_version >= "3.11" and python_version < "4.0"
-gevent==23.9.0.post1 ; python_version >= "3.11" and python_version < "4.0"
-greenlet==2.0.2 ; python_version >= "3.11" and python_version < "4.0"
+fastapi==0.128.0 ; python_version >= "3.11" and python_version < "4.0"
+gevent==25.9.1 ; python_version >= "3.11" and python_version < "4.0"
+greenlet==3.3.0 ; python_version >= "3.11" and python_version < "4.0"
 grequests==0.7.0 ; python_version >= "3.11" and python_version < "4.0"
 h11==0.14.0 ; python_version >= "3.11" and python_version < "4.0"
 httpcore==0.18.0 ; python_version >= "3.11" and python_version < "4.0"
@@ -36,19 +36,19 @@ pytest-sugar==0.9.7 ; python_version >= "3.11" and python_version < "4.0"
 pytest==7.4.2 ; python_version >= "3.11" and python_version < "4.0"
 python-dotenv==1.0.0 ; python_version >= "3.11" and python_version < "4.0"
 python-jose==3.3.0 ; python_version >= "3.11" and python_version < "4.0"
-python-multipart==0.0.6 ; python_version >= "3.11" and python_version < "4.0"
+python-multipart==0.0.18 ; python_version >= "3.11" and python_version < "4.0"
 redis==5.0.1 ; python_version >= "3.11" and python_version < "4.0"
 requests==2.31.0 ; python_version >= "3.11" and python_version < "4.0"
 rsa==4.9 ; python_version >= "3.11" and python_version < "4"
 sentry-sdk==1.38.0 ; python_version >= "3.11" and python_version < "4.0"
-setuptools==68.2.2 ; python_version >= "3.11" and python_version < "4.0"
+setuptools==78.1.1 ; python_version >= "3.11" and python_version < "4.0"
 six==1.16.0 ; python_version >= "3.11" and python_version < "4.0"
 sniffio==1.3.0 ; python_version >= "3.11" and python_version < "4.0"
 sqlalchemy==2.0.21 ; python_version >= "3.11" and python_version < "4.0"
-starlette==0.27.0 ; python_version >= "3.11" and python_version < "4.0"
+starlette==0.49.3 ; python_version >= "3.11" and python_version < "4.0"
 termcolor==2.3.0 ; python_version >= "3.11" and python_version < "4.0"
 typing-extensions==4.8.0 ; python_version >= "3.11" and python_version < "4.0"
-urllib3==2.0.7 ; python_version >= "3.11" and python_version < "4.0"
+urllib3==2.6.3 ; python_version >= "3.11" and python_version < "4.0"
 uvicorn==0.23.2 ; python_version >= "3.11" and python_version < "4.0"
 zope-event==5.0 ; python_version >= "3.11" and python_version < "4.0"
 zope-interface==6.1 ; python_version >= "3.11" and python_version < "4.0"

pyproject.toml

@@ -8,20 +8,20 @@ packages = [{include = "ithome2023_fastapi_tutorial"}]
 
 [tool.poetry.dependencies]
 python = "^3.11"
-fastapi = "^0.103.1"
+fastapi = "^0.128.0"
 uvicorn = "^0.23.2"
 python-dotenv = "^1.0.0"
 email-validator = "^2.0.0.post2"
 sqlalchemy = "^2.0.21"
 psycopg2-binary = "^2.9.7"
 pymysql = "^1.1.0"
-cryptography = "^41.0.4"
+cryptography = "^42.0.8"
 asyncpg = "^0.28.0"
-greenlet = "^2.0.2"
+greenlet = "^3.3.0"
 aiomysql = "^0.2.0"
 passlib = "^1.7.4"
 bcrypt = "^4.0.1"
-python-multipart = "^0.0.6"
+python-multipart = "^0.0.18"
 python-jose = "^3.3.0"
 pytest = "^7.4.2"
 httpx = "^0.25.0"
@@ -34,6 +34,7 @@ aiofiles = "^23.2.1"
 speechrecognition = "^3.10.1"
 moviepy = "^1.0.3"
 rq = "^1.15.1"
+starlette = "^0.49.3"
 
 
 [build-system]