fix(deps): upgrade vulnerable runtime packages

This commit is contained in:
jxxghp
2026-10-01 21:39:50 +08:00
parent 1bb7564e85
commit 1b18985757
2 changed files with 10 additions and 10 deletions

View File

@@ -63,7 +63,7 @@ dependencies = [
"pycryptodome~=3.23.0",
"pydantic>=2.13.4,<3.0.0",
"pydantic-settings>=2.14.2,<3.0.0",
"pyjwt~=2.14.0",
"pyjwt~=2.15.0",
"pyotp~=2.9.0",
"pyparsing~=3.3.2",
"pyquery~=2.0.1",
@@ -95,7 +95,7 @@ dependencies = [
"torrentool~=1.2.0",
"tqdm~=4.68.2",
"transmission-rpc~=7.0.11",
"urllib3~=2.7.0",
"urllib3~=2.8.0",
"uvicorn~=0.52.4",
"watchdog~=6.0.0",
"watchfiles~=1.2.0",

16
uv.lock generated
View File

@@ -1824,7 +1824,7 @@ requires-dist = [
{ name = "pycryptodome", specifier = "~=3.23.0" },
{ name = "pydantic", specifier = ">=2.13.4,<3.0.0" },
{ name = "pydantic-settings", specifier = ">=2.14.2,<3.0.0" },
{ name = "pyjwt", specifier = "~=2.14.0" },
{ name = "pyjwt", specifier = "~=2.15.0" },
{ name = "pyotp", specifier = "~=2.9.0" },
{ name = "pyparsing", specifier = "~=3.3.2" },
{ name = "pyquery", specifier = "~=2.0.1" },
@@ -1854,7 +1854,7 @@ requires-dist = [
{ name = "torrentool", specifier = "~=1.2.0" },
{ name = "tqdm", specifier = "~=4.68.2" },
{ name = "transmission-rpc", specifier = "~=7.0.11" },
{ name = "urllib3", specifier = "~=2.7.0" },
{ name = "urllib3", specifier = "~=2.8.0" },
{ name = "uvicorn", specifier = "~=0.52.4" },
{ name = "watchdog", specifier = "~=6.0.0" },
{ name = "watchfiles", specifier = "~=1.2.0" },
@@ -2483,11 +2483,11 @@ wheels = [
[[package]]
name = "pyjwt"
version = "2.14.0"
version = "2.15.1"
source = { registry = "https://pypi.org/simple" }
sdist = { url = "https://files.pythonhosted.org/packages/af/c3/8a3b59c25070cc61dc517fbdfa5dc0904670c96f605cc69759dc09166b99/pyjwt-2.14.0.tar.gz", hash = "sha256:77283c83fb56ecf566a886c757a714bc83668e38156de2cce8263302f42e0b86", size = 113177, upload-time = "2026-09-11T13:11:54.638Z" }
sdist = { url = "https://files.pythonhosted.org/packages/43/ea/5194e52748b0da83d71e082d75496eaec6e58f419f5e184786ded517e6a9/pyjwt-2.15.1.tar.gz", hash = "sha256:4f259e80cdfb6b3fc18a7de51fd1ef9ec79652f25019bae68975ca2468a34df8", size = 121252, upload-time = "2026-09-28T18:40:42.598Z" }
wheels = [
{ url = "https://files.pythonhosted.org/packages/9c/97/672cb32ce0dfea44b740cb7b4f97038463b9cf7c0ead1aacf595572851d6/pyjwt-2.14.0-py3-none-any.whl", hash = "sha256:ad0cef71c756a56e74863c2919cf0985f72decbcfcb550ee2f422e7c62b5eedc", size = 32896, upload-time = "2026-09-11T13:11:53.409Z" },
{ url = "https://files.pythonhosted.org/packages/50/ca/44de4e75f8aadc457f0634be3b542815078ded46dca30efb960edeecad6e/pyjwt-2.15.1-py3-none-any.whl", hash = "sha256:42d59d631f7768a1028a64c7ff581a9bf7519804daf91fc5b6c56e30eec5e193", size = 33860, upload-time = "2026-09-28T18:40:41.429Z" },
]
[[package]]
@@ -3269,11 +3269,11 @@ wheels = [
[[package]]
name = "urllib3"
version = "2.7.0"
version = "2.8.0"
source = { registry = "https://pypi.org/simple" }
sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
sdist = { url = "https://files.pythonhosted.org/packages/e3/05/b17359e1cefb4f909b5e40b1b90a496d987258916dbbf88e842c729f510e/urllib3-2.8.0.tar.gz", hash = "sha256:63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63", size = 458972, upload-time = "2026-09-15T19:29:36.253Z" }
wheels = [
{ url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
{ url = "https://files.pythonhosted.org/packages/92/9d/c4e665119135114480843e7ab388fa94d8480650450e6f8e26b70d323a4c/urllib3-2.8.0-py3-none-any.whl", hash = "sha256:0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3", size = 135717, upload-time = "2026-09-15T19:29:34.577Z" },
]
[[package]]