Skip to content

Commit 394e970

Browse files
fix(deps): update constraint-dependencies for mistune
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 26a57af commit 394e970

2 files changed

Lines changed: 25 additions & 23 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ constraint-dependencies = [
1919
"langgraph-sdk>=0.3.15",
2020
"langsmith>=0.8.18",
2121
"lxml>=6.1.0", # CVE-2026-41066: XML entity expansion with default resolve_entities=True
22+
"mistune>=3.3.0",
2223
"msgpack>=1.2.1",
2324
"pillow>=12.2.0", # CVE-2026-40192 + 4 more: heap overflow, OOB write, DoS
2425
"protobuf>=5.29.6", # CVE-2025-4565 + CVE-2026-0994: parsing vulnerabilities

uv.lock

Lines changed: 24 additions & 23 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)