Skip to content

fix(deps): bump Brotli to 1.2.1 - #256

Merged
severinlandolt merged 1 commit into
mainfrom
security/brotli-1-2-1-971bf951de
Oct 25, 2026
Merged

severinlandolt merged 1 commit into
mainfrom
security/brotli-1-2-1-971bf951de

Conversation

@vercel-security-reviewer-slack

Copy link
Copy Markdown
Contributor

Updates Brotli to 1.2.1 in requirements.txt (from 1.2.0) and requirements-test.txt (from 1.1.0). No other dependency pins changed; requirements input files are unchanged.

Validation: git diff --check; confirmed both Brotli pins; installed Brotli 1.2.1 and FontTools 4.60.1 into an isolated target directory; compression/decompression and a repository TTF-to-WOFF2 round trip passed on Python 3.14. Full dependency installation, font builds, and QA suite were not run.

Vercel Security Reviewer Publish-Id: cef1e8cf-0885-4a7a-8349-37a460d563d0
@vercel

vercel Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
v0-vercel-geist-font Ready Ready Preview, v0 Oct 24, 2026 9:42pm UTC

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​brotli@​1.2.0 ⏵ 1.2.1100100 +75100100100

View full report

@caleb-vercel
caleb-vercel self-requested a review October 24, 2026 21:45
@severinlandolt
severinlandolt merged commit be21666 into main Oct 25, 2026
11 checks passed
@severinlandolt
severinlandolt deleted the security/brotli-1-2-1-971bf951de branch October 25, 2026 03:06

This branch was successfully deployed

1 active deployment
Preview — 179d8d12 Deployed Oct 24, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants