From 916d5deac25f563d76efd034e47ec0e65bdedbc8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 16:47:29 +0000 Subject: [PATCH] chore(deps): bump the minor-patch group across 1 directory with 24 updates Bumps the minor-patch group with 24 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` | | [anyio](https://github.com/agronholm/anyio) | `4.13.0` | `4.14.2` | | [click](https://github.com/pallets/click) | `8.4.0` | `8.4.2` | | [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.140.6` | | [idna](https://github.com/kjd/idna) | `3.15` | `3.18` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` | | [starlette](https://github.com/Kludex/starlette) | `1.0.0` | `1.3.1` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.47.0` | `0.51.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.49` | `2.0.51` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.18.4` | `1.18.5` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.12.1` | `2.13.0` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.28` | `0.0.32` | | [pyotp](https://github.com/pyauth/pyotp) | `2.9.0` | `2.10.0` | | [google-auth](https://github.com/googleapis/google-cloud-python) | `2.53.0` | `2.56.2` | | [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.14.3` | `4.15.0` | | [boto3](https://github.com/boto/boto3) | `1.43.9` | `1.43.56` | | [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.43.9` | `1.43.56` | | [pillow](https://github.com/python-pillow/Pillow) | `12.2.0` | `12.3.0` | | [moto](https://github.com/getmoto/moto) | `5.2.1` | `5.2.2` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` | | [black](https://github.com/psf/black) | `26.5.0` | `26.5.1` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` | Updates `annotated-types` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/annotated-types/annotated-types/releases) - [Commits](https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0) Updates `anyio` from 4.13.0 to 4.14.2 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](https://github.com/agronholm/anyio/compare/4.13.0...4.14.2) Updates `click` from 8.4.0 to 8.4.2 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](https://github.com/pallets/click/compare/8.4.0...8.4.2) Updates `fastapi` from 0.136.1 to 0.140.6 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.136.1...0.140.6) Updates `idna` from 3.15 to 3.18 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18) Updates `pydantic-settings` from 2.14.1 to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.1...v2.14.2) Updates `starlette` from 1.0.0 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.0.0...1.3.1) Updates `typing-extensions` from 4.15.0 to 4.16.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0) Updates `uvicorn` from 0.47.0 to 0.51.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.47.0...0.51.0) Updates `sqlalchemy` from 2.0.49 to 2.0.51 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` from 1.18.4 to 1.18.5 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `pyjwt` from 2.12.1 to 2.13.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.12.1...2.13.0) Updates `python-multipart` from 0.0.28 to 0.0.32 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.28...0.0.32) Updates `pyotp` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/pyauth/pyotp/releases) - [Changelog](https://github.com/pyauth/pyotp/blob/main/Changes.rst) - [Commits](https://github.com/pyauth/pyotp/compare/v2.9.0...v2.10.0) Updates `google-auth` from 2.53.0 to 2.56.2 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.53.0...google-auth-v2.56.2) Updates `beautifulsoup4` from 4.14.3 to 4.15.0 Updates `boto3` from 1.43.9 to 1.43.56 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.43.9...1.43.56) Updates `boto3-stubs` from 1.43.9 to 1.43.56 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `pillow` from 12.2.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0) Updates `moto` from 5.2.1 to 5.2.2 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](https://github.com/getmoto/moto/compare/5.2.1...5.2.2) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.3.0...v1.4.0) Updates `black` from 26.5.0 to 26.5.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](https://github.com/psf/black/compare/26.5.0...26.5.1) Updates `mypy` from 2.1.0 to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.1.0...v2.3.0) --- updated-dependencies: - dependency-name: annotated-types dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: anyio dependency-version: 4.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: click dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: fastapi dependency-version: 0.140.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: idna dependency-version: '3.18' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: typing-extensions dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: uvicorn dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: sqlalchemy dependency-version: 2.0.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: alembic dependency-version: 1.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: pyjwt dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: python-multipart dependency-version: 0.0.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: pyotp dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: google-auth dependency-version: 2.56.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: beautifulsoup4 dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: boto3 dependency-version: 1.43.56 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: boto3-stubs dependency-version: 1.43.56 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: moto dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: black dependency-version: 26.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 48 ++++++++++++++++++++-------------------- 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 02433cf5..22835561 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,39 +1,39 @@ # Core FastAPI and web framework dependencies -annotated-types==0.7.0 -anyio==4.13.0 -click==8.4.0 -fastapi==0.136.1 +annotated-types==0.8.0 +anyio==4.14.2 +click==8.4.2 +fastapi==0.140.6 h11==0.16.0 -idna==3.15 +idna==3.18 pydantic==2.13.3 pydantic[email] -pydantic-settings==2.14.1 +pydantic-settings==2.14.2 python-dotenv==1.2.2 python-json-logger==4.1.0 sniffio==1.3.1 -starlette==1.0.0 +starlette==1.3.1 typing-inspection==0.4.2 -typing_extensions==4.15.0 -uvicorn==0.47.0 +typing_extensions==4.16.0 +uvicorn==0.51.0 # Database dependencies -sqlalchemy==2.0.49 +sqlalchemy==2.0.51 psycopg2-binary==2.9.12 -alembic==1.18.4 +alembic==1.18.5 uuid6==2025.0.1 # Authentication and security # PyJWT — primary JWT library (AUTH-04, Phase 5 D-06). -PyJWT==2.12.1 +PyJWT==2.13.0 bcrypt==5.0.0 -python-multipart==0.0.28 -pyotp==2.9.0 +python-multipart==0.0.32 +pyotp==2.10.0 qrcode[pil]==8.2 webauthn==2.7.1 -google-auth==2.53.0 +google-auth==2.56.2 requests==2.34.2 -beautifulsoup4==4.14.3 +beautifulsoup4==4.15.0 defusedxml==0.7.1 # Circuit breaker for crawler rate-limit protection (CRAWL-04). Pinned exact # version; see threat model T-03-02-02 for supply-chain posture. @@ -47,9 +47,9 @@ pybreaker==1.4.1 curl_cffi==0.15.0 # Image storage and processing -boto3==1.43.9 -boto3-stubs[s3,sesv2]==1.43.9 # Type stubs for boto3 S3 and SES clients -Pillow==12.2.0 +boto3==1.43.56 +boto3-stubs[s3,sesv2]==1.43.56 # Type stubs for boto3 S3 and SES clients +Pillow==12.3.0 # Observability (Phase 2 / OBS-01 + OBS-02) sentry-sdk>=2.60.0,<3 @@ -61,20 +61,20 @@ sentry-sdk>=2.60.0,<3 aws-embedded-metrics>=3.5.0,<4 # Testing: in-memory S3 mock (used with pytest fixtures; never runs in production) -moto[s3]==5.2.1 +moto[s3]==5.2.2 # Testing dependencies -pytest==9.0.3 -pytest-asyncio==1.3.0 +pytest==9.1.1 +pytest-asyncio==1.4.0 pytest-xdist==3.8.0 pytest-cov==7.1.0 pytest-recording==0.13.4 httpx==0.28.1 # Development tools -black==26.5.0 +black==26.5.1 isort==8.0.1 -mypy==2.1.0 +mypy==2.3.0 watchdog==6.0.0 # Perf-gate load testing (M002/S05/T05). Pure-Python load runner; the gate