Skip to content

deps: bump dependencies with published security fixes - #82

Closed
fastrevmd-lab wants to merge 1 commit into
mainfrom
deps/security-updates
Closed

fastrevmd-lab wants to merge 1 commit into
mainfrom
deps/security-updates

Conversation

@fastrevmd-lab

@fastrevmd-lab fastrevmd-lab commented Oct 16, 2026 •

Copy link
Copy Markdown
Member

Bumps transitive Python dependencies with published security fixes across all eight services (services/*/uv.lock only; no pyproject.toml or code changes).

Package New version (all services)
PyJWT 2.15.1
urllib3 2.8.0
anyio 4.14.2 – 4.15.1
cryptography 50.0.2
starlette 1.8.0
mcp 1.30.0
pydantic-settings 2.16.0

All are transitive (PyJWT arrives via mcp; ssdf does not call PyJWT directly). Verified: pytest -m "not integration" in all eight services, ruff check and ruff format --check, plus full CI.

Paperclip: MEC-3100

🤖 Generated with Claude Code

Paperclip: MEC-3107

Refresh uv.lock in all eight services for PyJWT, urllib3, anyio,
cryptography, starlette, mcp and pydantic-settings.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@fastrevmd-lab

Copy link
Copy Markdown
Member Author

Superseded by a fresh PR from the same branch with a class-level description.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant