From 5aa937eaa567c612dd680adc741af9b02f0dbdbb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 20 Sep 2026 03:11:50 +0000 Subject: [PATCH] chore(deps): bump the ci-toolchain group across 1 directory with 3 updates Bumps the ci-toolchain group with 3 updates in the /requirements directory: [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python), [httpcore2](https://github.com/pydantic/httpx2) and [httpx2](https://github.com/pydantic/httpx2). Updates `cyclonedx-bom` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/CycloneDX/cyclonedx-python/compare/v7.3.0...v7.4.0) Updates `httpcore2` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Commits](https://github.com/pydantic/httpx2/compare/v2.12.0...v2.13.0) Updates `httpx2` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md) - [Commits](https://github.com/pydantic/httpx2/compare/v2.12.0...v2.13.0) --- updated-dependencies: - dependency-name: cyclonedx-bom dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-toolchain - dependency-name: httpcore2 dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-toolchain - dependency-name: httpx2 dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-toolchain ... Signed-off-by: dependabot[bot] --- requirements/recovery-v2.0.2.in | 2 +- requirements/recovery-v2.0.2.txt | 25 ++++++++++--------------- requirements/runtime.txt | 12 ++++++------ requirements/sbom.in | 2 +- requirements/sbom.txt | 18 ++++++------------ 5 files changed, 24 insertions(+), 35 deletions(-) diff --git a/requirements/recovery-v2.0.2.in b/requirements/recovery-v2.0.2.in index 25867ad..469254a 100644 --- a/requirements/recovery-v2.0.2.in +++ b/requirements/recovery-v2.0.2.in @@ -3,7 +3,7 @@ -r build.in PyYAML>=6 aces-sdl==0.23.1 -cyclonedx-bom==7.3.0 +cyclonedx-bom==7.4.0 # Floor, not a pin: the historical closure pulls cryptography transitively # (aces-sdl, asyncssh, pyjwt) and the resolver would otherwise hold it at the # version this lock was first generated with, which is affected by diff --git a/requirements/recovery-v2.0.2.txt b/requirements/recovery-v2.0.2.txt index 6914a37..9636d23 100644 --- a/requirements/recovery-v2.0.2.txt +++ b/requirements/recovery-v2.0.2.txt @@ -3,7 +3,7 @@ aces-sdl==0.23.1 \ --hash=sha256:0a53f680c5b2420554cc3f6053ba64d0f4ef919a73337ab060f5dc283295bc0d \ --hash=sha256:86f5e99d2dff009fe7165bbe8853f6fdf5a41074e7813f2e38e092910c1147a1 - # via -r requirements/recovery-v2.0.2.in + # via -r recovery-v2.0.2.in annotated-doc==0.0.4 \ --hash=sha256:571ac1dc6991c450b25a9c2d84a3705e2ae7a53467b5d111c24fa8baabbed320 \ --hash=sha256:fbcda96e87e9c92ad167c2e53839e57503ecfda18804ea28102353485033faa4 @@ -151,7 +151,7 @@ boolean-py==5.0 \ build==1.6.1 \ --hash=sha256:51cc11666391ab6f092070437ac747002ff46f3e4113a3622177ee6b488bfc53 \ --hash=sha256:ecd351a4be9d35a9eaaba244a7687143c9c7d4aea6ac964e7e7ddab20cbcf4e7 - # via -r requirements/build.in + # via -r build.in certifi==2026.7.22 \ --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \ --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55 @@ -316,14 +316,14 @@ cryptography==50.0.1 \ --hash=sha256:fd3718b960d0b5dd213cdf03f3bcb7000e69dda0de8b956061947ff6bcff5558 \ --hash=sha256:ff838d62ec1bfce4f9ba7fa16f4a7b554cd8d0c299e6be37502161a660c84eef # via - # -r requirements/recovery-v2.0.2.in + # -r recovery-v2.0.2.in # aces-sdl # asyncssh # pyjwt -cyclonedx-bom==7.3.0 \ - --hash=sha256:73d7d76b3a28ebadc50eabf424cbcf128785a74b8a59ce7893da2e29cfaab585 \ - --hash=sha256:d54080d65731980945de38e52009a5e5711f4a3c31377a3d13af96eaca5fcf3d - # via -r requirements/recovery-v2.0.2.in +cyclonedx-bom==7.4.0 \ + --hash=sha256:425862a74a6660cfa867fd4bc3dff34ca1cec49549594e4a9096663135426cfe \ + --hash=sha256:75756389cef95b9bb1d9c8d0c5b884719c2bfeb595109e2ed5321598a141bf4a + # via -r recovery-v2.0.2.in cyclonedx-python-lib[validation]==11.11.0 \ --hash=sha256:3049fc83e06a059b5c5907a527625a8ed5073caab10607ed4c9e5503b590fd44 \ --hash=sha256:4b3194db72b613717f2912447e67ab618c75ff7dcac6c4af3c0e9e1ac617c102 @@ -337,7 +337,7 @@ defusedxml==0.7.1 \ editables==0.6 \ --hash=sha256:1163834902381c4613787951c5914800fdf155ae08848a373b8ea5006780977c \ --hash=sha256:d70e4698078a1d033e7786d9c64e5be070d058a67c21417024d38a58ac20aa43 - # via -r requirements/build.in + # via -r build.in fastapi==0.140.7 \ --hash=sha256:09a640af2d29006345e1f28e4f031fa60f89b1a75d29f26070f3afa677d66cce \ --hash=sha256:960bb9696d8fd19dff488aa4f67f276364542cfcce9f7e68a82fe49dce126626 @@ -355,7 +355,7 @@ h11==0.16.0 \ hatchling==1.32.0 \ --hash=sha256:0bdbde4a52b06c37e3eca395f85a762bf0ef06fe374fd8ae429dc6be10230f5f \ --hash=sha256:0e17c9c3b9aa7c625acc8d0f5b622f107d5049af9ecf5ada4de1aada5be7cdbc - # via -r requirements/build.in + # via -r build.in httpcore==1.0.9 \ --hash=sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55 \ --hash=sha256:6e34463af53fd2ab5d807f399a9b45ea31c3dfa2276f15a2c3f00afff6e176e8 @@ -875,7 +875,7 @@ pyyaml==6.0.3 \ --hash=sha256:fa160448684b4e94d80416c0fa4aac48967a969efe22931448d853ada8baf926 \ --hash=sha256:fc09d0aa354569bc501d4e787133afc08552722d3ab34836a80547331bb5d4a0 # via - # -r requirements/recovery-v2.0.2.in + # -r recovery-v2.0.2.in # aces-sdl # uvicorn referencing==0.37.0 \ @@ -1070,16 +1070,11 @@ typing-extensions==4.16.0 \ --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \ --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5 # via - # anyio # asyncssh - # blake3 - # cyclonedx-python-lib # fastapi # mcp # pydantic # pydantic-core - # referencing - # starlette # typing-inspection typing-inspection==0.4.2 \ --hash=sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7 \ diff --git a/requirements/runtime.txt b/requirements/runtime.txt index 3563369..a5a6de4 100644 --- a/requirements/runtime.txt +++ b/requirements/runtime.txt @@ -311,9 +311,9 @@ h11==0.16.0 \ # via # httpcore2 # uvicorn -httpcore2==2.12.0 \ - --hash=sha256:7e04258ce01013d7d615e5b910a3b27fac937d7a95038227e79652b4ba3b4ceb \ - --hash=sha256:9293522bba0aa7c4c8e9e3f040c16575bd8868e155a77fa30c7a9085a5eae648 +httpcore2==2.13.0 \ + --hash=sha256:2adc8be4fb285fbcd6d894298db3b52c177e74b6674eda3a76bd36be3292a3db \ + --hash=sha256:35ae5be347aa40467b4a5dc032ac67ebb6d27189fc97e8cebcf99616f6a1bb9e # via httpx2 httptools==0.8.0 \ --hash=sha256:0770728beb05094c809b98e814edff5fef69d26ad7d21185f2f6d5884a0ba683 \ @@ -367,9 +367,9 @@ httptools==0.8.0 \ --hash=sha256:f256d6ce930c52ca1cb2a960b7da03548c454e7d28b06059ad41bfe789036ce0 \ --hash=sha256:fe2a4c95aeba2209434e7b31172da572846cae8ca0bf1e7013e61b99fbbf5e72 # via uvicorn -httpx2==2.12.0 \ - --hash=sha256:7631fe9887a8a2275f4a2540e053aa670fcc50742864a9ae7c66e609fdcf12cf \ - --hash=sha256:cc8b6eecb8661c146b8f89a60e97456ee086e91a784ed31ac450c3a9e613dd36 +httpx2==2.13.0 \ + --hash=sha256:81bd07dc67a3701729ef1f777a3c00c915d4539604fdb5afd327f8682f6b7b44 \ + --hash=sha256:fc12720cedf72faa26cca6b4ca394e05c894e7d7933fc45cafe767960804e49a # via mcp idna==3.19 \ --hash=sha256:5e0811a4383b21dc5838069f801c4fb62113b7447663d2530d2bd6e77b49bf15 \ diff --git a/requirements/sbom.in b/requirements/sbom.in index c70a43d..00edf0e 100644 --- a/requirements/sbom.in +++ b/requirements/sbom.in @@ -1 +1 @@ -cyclonedx-bom==7.3.1 +cyclonedx-bom==7.4.0 diff --git a/requirements/sbom.txt b/requirements/sbom.txt index 2a52f7a..85ffd41 100644 --- a/requirements/sbom.txt +++ b/requirements/sbom.txt @@ -18,11 +18,11 @@ chardet==5.2.0 \ --hash=sha256:1b3b6ff479a8c414bc3fa2c0852995695c4a026dcd6d0633b2dd092ca39c1cf7 \ --hash=sha256:e1cf59446890a00105fe7b7912492ea04b6e6f06d4b742b2c788469e34c82970 # via cyclonedx-bom -cyclonedx-bom==7.3.1 \ - --hash=sha256:8c5adccefd593e89c0500463649c232625cee8e38dae1a433e057dfa495eff08 \ - --hash=sha256:ebd99dc2cf62a7067e327bef2b2ffada99d57ed3fda2db6c4c8f3004e5bfd3cf - # via -r requirements/sbom.in -cyclonedx-python-lib==11.12.0 \ +cyclonedx-bom==7.4.0 \ + --hash=sha256:425862a74a6660cfa867fd4bc3dff34ca1cec49549594e4a9096663135426cfe \ + --hash=sha256:75756389cef95b9bb1d9c8d0c5b884719c2bfeb595109e2ed5321598a141bf4a + # via -r sbom.in +cyclonedx-python-lib[validation]==11.12.0 \ --hash=sha256:0e807521a921a5c3cb8ce1153f8a61d29eedfe76a46aac2796b7c6b573391a54 \ --hash=sha256:16767c4039de90c04e9f03348f8f0ed4b8ff842eaa7eefcad3a95685f970dacf # via cyclonedx-bom @@ -46,7 +46,7 @@ jsonpointer==3.1.1 \ --hash=sha256:0b801c7db33a904024f6004d526dcc53bbb8a4a0f4e32bfd10beadf60adf1900 \ --hash=sha256:8ff8b95779d071ba472cf5bc913028df06031797532f08a7d5b602d8b2a488ca # via jsonschema -jsonschema==4.26.0 \ +jsonschema[format-nongpl]==4.26.0 \ --hash=sha256:0c26707e2efad8aa1bfc5b7ce170f3fccc2e4918ff85989ba9ffa9facb2be326 \ --hash=sha256:d489f15263b8d200f8387e64b4c3a75f06629559fb73deb8fdfb525f2dab50ce # via cyclonedx-python-lib @@ -417,12 +417,6 @@ sortedcontainers==2.4.0 \ --hash=sha256:25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88 \ --hash=sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0 # via cyclonedx-python-lib -typing-extensions==4.16.0 \ - --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \ - --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5 - # via - # cyclonedx-python-lib - # referencing tzdata==2026.4 \ --hash=sha256:c2169a8b0a7a5e9674da5a135ccdfb2b3e671b333ed9fed17b41f73c34476e81 \ --hash=sha256:f1b8bd365d8d210c55353f4d7f8d6d8561c0ba50d704b700d195a9424bba0d79