Skip to content

Fix Dependabot security alerts: aiohttp, Pygments, esbuild, ws, js-yaml, @babel/core, flatted, react-router-dom #4951

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Copilot wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Fix Dependabot security alerts: aiohttp, Pygments, esbuild, ws, js-yaml, @babel/core, flatted, react-router-dom #4951

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
5994a76
Initial plan
Copilot Jul 10, 2026
d0b4117
Fix Dependabot security alerts: update aiohttp, Pygments, esbuild, ws…
Copilot Jul 10, 2026
823d1d0
Bump version to 0.25.28 for api_app and 0.13.5 for resource_processor
ChrisChapman-gh Jul 10, 2026
49cc403
Refactor UserMenu tests to use dynamic mock accounts and handle no ac…
ChrisChapman-gh Jul 10, 2026
2ffcca4
fix: bump CLI version after dependency updates
Copilot Jul 12, 2026
6bdc230
Merge branch 'main' into copilot/update-dependencies-aiohttp
ChrisChapman-gh Jul 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ ENHANCEMENTS:
* Add support for setting resource processor VMSS SKU via environment variables ([#4936](https://github.com/microsoft/AzureTRE/issues/4936))
* Exclude recovery service vaults from e2e tests ([#4920](https://github.com/microsoft/AzureTRE/issues/4920))
* Update API, CLI, and UI dependencies to address high-severity Dependabot alerts, including `PyJWT`, `Vite`, `lodash`, `fast-uri`, `flatted`, `immutable`, and `minimatch`.
* Update dependencies to address Dependabot security alerts: `aiohttp` to 3.14.1, `Pygments` to 2.20.0, `esbuild`, `ws`, `js-yaml`, `@babel/core`, `flatted` (via vitest upgrade), and `react-router-dom`. ([#4950](https://github.com/microsoft/AzureTRE/issues/4950))

BUG FIXES:
* Fix API timeout and name collision failures on workspace creation by checking storage account name availability and improved logging. ([#4946](https://github.com/microsoft/AzureTRE/pull/4946))
Expand Down
2 changes: 1 addition & 1 deletion api_app/_version.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
__version__ = "0.25.27"
__version__ = "0.25.28"
2 changes: 1 addition & 1 deletion api_app/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
aiohttp==3.13.4
aiohttp==3.14.1
azure-core==1.38.0
azure-cosmos==4.14.3
azure-eventgrid==4.22.0
Expand Down
4 changes: 2 additions & 2 deletions cli/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ httpx==0.28.1
msal==1.31.1
jmespath==1.0.1
tabulate==0.9.0
pygments==2.19.2
pygments==2.20.0
PyJWT==2.13.0
azure-cli-core==2.68.0
azure-identity==1.25.1
aiohttp==3.13.4
aiohttp==3.14.1
6 changes: 3 additions & 3 deletions cli/setup.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
from setuptools import setup

PROJECT = 'azure-tre-cli'
VERSION = '0.2.8'
VERSION = '0.2.9'

try:
long_description = open('README.md', 'rt').read()
Expand Down Expand Up @@ -45,11 +45,11 @@
"msal==1.31.1",
"jmespath==1.0.1",
"tabulate==0.9.0",
"pygments==2.19.2",
"pygments==2.20.0",
"PyJWT==2.13.0",
"azure-cli-core==2.68.0",
"azure-identity==1.25.1",
"aiohttp==3.13.4"
"aiohttp==3.14.1"
Comment thread
ChrisChapman-gh marked this conversation as resolved.
],

namespace_packages=[],
Expand Down
2 changes: 1 addition & 1 deletion resource_processor/_version.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
__version__ = "0.13.4"
__version__ = "0.13.5"
2 changes: 1 addition & 1 deletion resource_processor/vmss_porter/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
aiohttp==3.13.4
aiohttp==3.14.1
azure-cli-core==2.68.0
azure-identity==1.25.1
azure-monitor-opentelemetry==1.6.4
Expand Down
Loading
Loading