Skip to content

fix(security): bump vulnerable transitive deps#53

Merged
ramonlimaramos merged 1 commit into
mainfrom
codex/fix-security-pip-audit
May 31, 2026
Merged

fix(security): bump vulnerable transitive deps#53
ramonlimaramos merged 1 commit into
mainfrom
codex/fix-security-pip-audit

Conversation

@ramonlimaramos

Copy link
Copy Markdown
Owner

Summary

  • add direct constraints for vulnerable transitive deps flagged by pip-audit
  • update uv.lock from idna 3.11 to 3.17 and starlette 1.0.0 to 1.2.1

Validation

  • UV_EXTRA_INDEX_URL=https://download.pytorch.org/whl/cpu uv sync --extra dev --python 3.13
  • uv run bandit -r src/synapto/ -c pyproject.toml
  • uv run pip-audit
  • uv run pytest tests/ -q

@ramonlimaramos ramonlimaramos merged commit 8a0a8c0 into main May 31, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant