Skip to content

Commit f9e9fa5

Browse files
fix(deps): update constraint-dependencies for starlette
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 9c16a95 commit f9e9fa5

2 files changed

Lines changed: 2 additions & 0 deletions

File tree

src/ogx_api/pyproject.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ required-version = ">=0.7.0"
77
constraint-dependencies = [
88
"protobuf>=6.33.5", # CVE-2026-0994: JSON recursion depth bypass
99
"requests>=2.33.0", # CVE-2026-25645: insecure temp file reuse in extract_zipped_paths()
10+
"starlette>=1.0.1",
1011
"urllib3>=2.6.3", # CVE-2026-21441 + CVE-2025-66471 + CVE-2025-66418: decompression bomb, streaming, chain bypass
1112
]
1213

src/ogx_api/uv.lock

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)