Commit Graph
11 Commits
Author SHA1 Message Date
dextmorgn 9fcc60ca63 fix(deps): upgrade Python dependencies to patch 27 known vulnerabilities
pip-audit reported 27 vulnerabilities across 12 packages, including
cryptography PYSEC-2026-36 (CVSS 9.8) used by the vault, a starlette
Host-header path bypass, and python-multipart arbitrary file write.

- cryptography 45.0.7 -> 46.0.7 (pin was capped at <46)
- fastapi 0.115 -> 0.136, pulling starlette 0.46 -> 1.2
- python-multipart 0.0.20 -> 0.0.32
- pyjwt, urllib3, aiohttp, lxml, idna, mako and transitive bumps
- dev tools: pytest 8 -> 9 (requires pytest-httpx >=0.36), black 25 -> 26

All four module test suites pass (458 tests). pip-audit now reports
no known vulnerabilities.
2026-06-05 08:57:19 +02:00
dextmorgn 85a85ed541 chore: switch to uv 2026-04-11 13:17:14 +02:00
dextmorgn f90aabb1ba feat: bump version 2025-11-27 17:34:57 +01:00
dextmorgn 2123ea5b8d feat: complete refactor 2025-11-27 17:16:41 +01:00
dextmorgn f78285a1ae feat: update contact email 2025-11-17 16:53:07 +01:00
dextmorgn aecec70408 feat: update licence 2025-11-08 20:26:33 +01:00
dextmorgn 5ea0156147 feat: python = >=3.12,<4.0 2025-10-27 08:56:21 +01:00
dextmorgn 0a85e3fea7 fix: python versions 2025-10-24 13:48:31 +02:00
dextmorgn d3f0150b79 fix: poetry python versions 2025-10-24 13:40:20 +02:00
dextmorgn 59ecd84207 feat: whoxy scanners 2025-08-22 23:27:24 +02:00
dextmorgn 5b62d9efba feat: flowsint-transforms, flowsint-types, flowsint-core 2025-08-13 17:04:11 +02:00