Skip to content

chore(deps): anyio 4.13.0→4.14.2(lockfile only) - #780

Merged
hideyukiMORI merged 1 commit into
mainfrom
chore/anyio-4.14.2
Sep 21, 2026
Merged

hideyukiMORI merged 1 commit into
mainfrom
chore/anyio-4.14.2

Conversation

@hideyukiMORI

Copy link
Copy Markdown
Owner

概要

09-21 の週次 CI が pip-audit で赤。間接依存 anyio 4.13.0 に CVE-2026-63374 / CVE-2026-64847(修正版 4.14.2)。

変更

  • uv lock --upgrade-package anyio==4.14.2(uv.lock のみ・3行)
  • 4.15.1 は Python ≥3.15 で lock が分岐するため採らず、4.14.2 の単一解に固定

確認(ローカル・3.14)

  • pip-audit: No known vulnerabilities found
  • pytest: 471 passed / 9 skipped(cov 92.97%)
  • mypy: no issues

🤖 Generated with Claude Code

…026-64847)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@hideyukiMORI
hideyukiMORI merged commit ad49284 into main Sep 21, 2026
7 checks passed
@hideyukiMORI
hideyukiMORI deleted the chore/anyio-4.14.2 branch September 21, 2026 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant