Skip to content

fix: remediate vulnerable Python dependency floor #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jason-allen-oneal merged 1 commit into from
Aug 30, 2026
Merged

fix: remediate vulnerable Python dependency floor #11

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ jobs:
strategy:
fail-fast: false
matrix:
python-version: ["3.9", "3.11", "3.13"]
python-version: ["3.10", "3.11", "3.13"]

steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4.2.2
Expand Down
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,12 @@ All notable changes to DarkPrompt are documented here.
- Added bounded regex evaluation and hardened refusal heuristics against mixed refusal/compliance.
- Sanitized HTTP status errors before persistence.
- Added a locked CI dependency graph and corrected organization repository links.
- Raised the locked minimums for Pillow, python-dotenv, and pytest to their patched releases.

### Compatibility

- Python 3.10 or newer is now required because the patched dependency releases no longer support
Python 3.9.

## 1.2.0

Expand Down
2 changes: 2 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,8 @@ Provider and model capabilities still vary. DarkPrompt reports unsupported paylo

## Installation

Python 3.10 or newer is required.

```bash
git clone https://github.com/BlueDot-IT/DarkPrompt.git
cd DarkPrompt
Expand Down
11 changes: 5 additions & 6 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ name = "darkprompt"
dynamic = ["version"]
description = "Repeatable adversarial security testing for large language model providers."
readme = "README.md"
requires-python = ">=3.9"
requires-python = ">=3.10"
license = "AGPL-3.0-or-later"
authors = [
{ name = "Jason O'Neal" },
Expand All @@ -22,7 +22,6 @@ classifiers = [
"Development Status :: 4 - Beta",
"Environment :: Console",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.9",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
Expand All @@ -34,7 +33,7 @@ dependencies = [
"jsonschema>=4.22,<5",
"openai>=1.30,<4",
"pydantic>=2.7,<3",
"python-dotenv>=1,<2",
"python-dotenv>=1.2.2,<2",
"pyyaml>=6,<7",
"regex>=2024.11.6,<2027",
"rich>=13,<16",
Expand All @@ -43,11 +42,11 @@ dependencies = [

[project.optional-dependencies]
media = [
"pillow>=10,<13",
"pillow>=12.3,<13",
]
dev = [
"build>=1.2,<2",
"pytest>=8,<10",
"pytest>=9.0.3,<10",
"pytest-cov>=5,<8",
"ruff>=0.9,<1",
]
Expand Down Expand Up @@ -83,7 +82,7 @@ show_missing = true
skip_covered = true

[tool.ruff]
target-version = "py39"
target-version = "py310"
line-length = 100

[tool.ruff.lint]
Expand Down
Loading
Loading