From e45eafd01135b0c74c79ecd7011e3e9394d5b482 Mon Sep 17 00:00:00 2001 From: bk86a Date: Thu, 6 Aug 2026 11:34:47 +0200 Subject: [PATCH] chore(deps): bundle Dependabot bumps (uvicorn 0.52.1, ruff 0.16.1), sync lock MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Supersedes #149 and #150, which each bump only the requirement range and leave requirements.lock — the file the production image actually installs from — pinned to the old version. Lock regenerated from a clean python:3.14-slim container (the runtime base image) per the documented procedure, so it also picks up transitive drift: packaging 26.3, starlette 1.4.1, websockets 17.0.1. uvicorn 0.52.1 is a WebSocket-only bugfix release (closing handshake, write flow control on server-initiated closes); this service exposes no WebSocket endpoints, so it carries no behaviour change here. Verified against the regenerated lock: 393 tests pass, pip-audit clean, ruff 0.16.1 check + format clean on app/ and scripts/. --- requirements-dev.txt | 2 +- requirements.lock | 8 ++++---- requirements.txt | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 7c46e5e..f04db17 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,5 +1,5 @@ -r requirements.txt -ruff>=0.16.0,<1 +ruff>=0.16.1,<1 bandit>=1.9.4,<2 pip-audit>=2.10.1,<3 pytest>=9.1.1,<10 diff --git a/requirements.lock b/requirements.lock index a1091fb..d8e18ac 100644 --- a/requirements.lock +++ b/requirements.lock @@ -15,7 +15,7 @@ httpx==0.28.1 idna==3.18 limits==5.8.0 numpy==2.5.1 -packaging==26.2 +packaging==26.3 pydantic==2.13.4 pydantic-settings==2.14.2 pydantic_core==2.46.4 @@ -24,11 +24,11 @@ PyYAML==6.0.3 redis==7.4.1 shapely==2.1.2 slowapi==0.1.10 -starlette==1.3.1 +starlette==1.4.1 typing-inspection==0.4.2 typing_extensions==4.16.0 -uvicorn==0.52.0 +uvicorn==0.52.1 uvloop==0.22.1 watchfiles==1.2.0 -websockets==17.0 +websockets==17.0.1 wrapt==2.3.0 diff --git a/requirements.txt b/requirements.txt index 71beb13..1493796 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ fastapi>=0.141.1,<1 -uvicorn[standard]>=0.52.0,<1 +uvicorn[standard]>=0.52.1,<1 httpx>=0.28.1,<1 pydantic>=2.13.4,<3 pydantic-settings>=2.14.2,<3