Skip to content

updating dependancies for dependabot - #3772

Merged
jonpspri merged 3 commits into
mainfrom
fix/dependabot
Mar 26, 2026
Merged

updating dependancies for dependabot#3772
jonpspri merged 3 commits into
mainfrom
fix/dependabot

Conversation

@Yosiefeyob

@Yosiefeyob Yosiefeyob commented Mar 20, 2026

Copy link
Copy Markdown
Contributor

Summary


Proactive security hardening: upgrade build and transitive dependencies to their latest patched versions and clean up dead code from a recently reverted login-page feature.


Changes

Package From To Scope
authlib v1.6.8  1.6.9 runtime 
Black v26.1.0 >=26.3.1 runtime
Undici v7.22.0 >=7.24.5 runtime 
PyJWT v2.11.0 >=2.12.0 runtime
github.com/buger/jsonparser 1.1.1 1.1.2 runtime

Impact

Security hardening only — no new features, no API changes, no behavioral changes.

@Yosiefeyob Yosiefeyob added chore Linting, formatting, dependency hygiene, or project maintenance chores security Improves security release-fix Critical bugfix required for the release labels Mar 20, 2026
@Yosiefeyob Yosiefeyob assigned Yosiefeyob and unassigned Yosiefeyob Mar 20, 2026
@Yosiefeyob
Yosiefeyob marked this pull request as ready for review March 20, 2026 17:25
Comment thread package.json Outdated
lucarlig
lucarlig previously approved these changes Mar 23, 2026
claudia-gray
claudia-gray previously approved these changes Mar 23, 2026

@claudia-gray claudia-gray left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
@jonpspri
jonpspri dismissed stale reviews from lucarlig and claudia-gray via 268422e March 26, 2026 22:50
@jonpspri jonpspri assigned jonpspri and unassigned jonpspri Mar 26, 2026
Signed-off-by: Jonathan Springer <jps@s390x.com>
@jonpspri
jonpspri merged commit 65d747e into main Mar 26, 2026
20 checks passed
@jonpspri
jonpspri deleted the fix/dependabot branch March 26, 2026 23:21
brian-hussey pushed a commit that referenced this pull request Mar 27, 2026
* updating dependancies for dependabot

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* fix: move undici to overrides instead of dependencies

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* Broaden required checks so they always run

Signed-off-by: Jonathan Springer <jps@s390x.com>

---------

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
Signed-off-by: Jonathan Springer <jps@s390x.com>
Co-authored-by: Jonathan Springer <jps@s390x.com>
madhu-mohan-jaishankar pushed a commit that referenced this pull request Mar 27, 2026
* updating dependancies for dependabot

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* fix: move undici to overrides instead of dependencies

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* Broaden required checks so they always run

Signed-off-by: Jonathan Springer <jps@s390x.com>

---------

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
Signed-off-by: Jonathan Springer <jps@s390x.com>
Co-authored-by: Jonathan Springer <jps@s390x.com>
msureshkumar88 pushed a commit that referenced this pull request May 13, 2026
* updating dependancies for dependabot

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* fix: move undici to overrides instead of dependencies

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* Broaden required checks so they always run

Signed-off-by: Jonathan Springer <jps@s390x.com>

---------

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
Signed-off-by: Jonathan Springer <jps@s390x.com>
Co-authored-by: Jonathan Springer <jps@s390x.com>
kamath-a pushed a commit to kamath-a/mcp-context-forge that referenced this pull request Jun 26, 2026
* updating dependancies for dependabot

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* fix: move undici to overrides instead of dependencies

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>

* Broaden required checks so they always run

Signed-off-by: Jonathan Springer <jps@s390x.com>

---------

Signed-off-by: Yosief Eyob <yosiefogbazion@gmail.com>
Signed-off-by: Jonathan Springer <jps@s390x.com>
Co-authored-by: Jonathan Springer <jps@s390x.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Linting, formatting, dependency hygiene, or project maintenance chores release-fix Critical bugfix required for the release security Improves security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants