Skip to content

chore(deps): bump the backend-minor-patch group across 1 directory with 6 updates #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump the backend-minor-patch group across 1 directory with 6 updates #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions backend/pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,27 +6,27 @@ requires-python = ">=3.14"
dependencies = [
"fastapi>=0.141.1",
"pydantic>=2.9",
"pydantic-settings>=2.14.2",
"pydantic-settings>=2.15.0",
"uvicorn[standard]>=0.52.0",
"anthropic>=0.120.2", # messages.parse/parsed_output (structured outputs) — verified vs 0.109.2
"openai>=2.50.0", # adjudication + list-models; non-beta responses.parse (verified vs 2.43.0)
"anthropic>=0.121.0", # messages.parse/parsed_output (structured outputs) — verified vs 0.109.2
"openai>=2.53.0", # adjudication + list-models; non-beta responses.parse (verified vs 2.43.0)
"sqlalchemy[asyncio]>=2.0.51", # persistence (admin-managed provider config)
"asyncpg>=0.30", # async Postgres driver for SQLAlchemy
"cryptography>=50.0.0", # Fernet — encrypt provider API keys at rest (was transitive via authlib)
"authlib>=1.3", # Entra ID OIDC (M365 SSO)
"itsdangerous>=2.2", # signed session cookie (Starlette SessionMiddleware) + magic-link tokens
"httpx>=0.27", # Authlib OIDC calls + Resend magic-link email
"python-multipart>=0.0.32", # FastAPI multipart/form parsing — the PDF UploadFile route (PR-C)
"pypdf>=6.14.2", # PDF → text for audit/evidence/page-guard (NOT the extraction path; ADR 0007)
"pypdf>=6.15.0", # PDF → text for audit/evidence/page-guard (NOT the extraction path; ADR 0007)
]

[project.optional-dependencies]
dev = [
"ruff>=0.16.0",
"ruff>=0.16.2",
"mypy>=2.3.0",
"pytest>=9.1.1",
"aiosqlite>=0.20", # offline test DB (sqlite+aiosqlite) so the suite needs no Postgres
"httpx2>=2.9.1", # Starlette 1.3 TestClient; runtime Authlib/Resend calls still use httpx
"httpx2>=2.10.0", # Starlette 1.3 TestClient; runtime Authlib/Resend calls still use httpx
]

# Virtual project: uv never builds/installs it as a package (the Dockerfile syncs with
Expand Down
Loading