Skip to content

Commit b78bd2a

Browse files
fix(deps): update constraint-dependencies for boto3
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent d0c826d commit b78bd2a

2 files changed

Lines changed: 2 additions & 0 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ required-version = ">=0.7.0"
1010
constraint-dependencies = [
1111
"aiohttp>=3.13.4", # CVE-2026-34514 + 9 more: CRLF injection, header leak, DoS
1212
"authlib>=1.6.11", # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
13+
"boto3>=1.43.9",
1314
"cryptography>=46.0.7", # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
1415
"fonttools>=4.60.2",
1516
"gitpython>=3.1.47", # Command injection via Git options bypass

uv.lock

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)