ci(actions)(deps): bump aquasecurity/trivy-action from d2a0b60797ff03db6132bd4e2b293f9b37081297 to c03d123cb480c08c69b054af418ea5e69fe6e57e in the github-actions group

.github/workflows/security.yml

@@ -53,7 +53,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@d2a0b60797ff03db6132bd4e2b293f9b37081297
+        uses: aquasecurity/trivy-action@c03d123cb480c08c69b054af418ea5e69fe6e57e
         with:
           scan-type: "fs"
           scan-ref: "."

requirements.lock

@@ -29,64 +29,64 @@ anyio==4.15.1 \
     # via
     #   httpx
     #   starlette
-ast-serialize==0.12.0 \
-    --hash=sha256:00b864398e6d300c435825cdb4cc7e652aed5cb8865810f5150cb90540a056e9 \
-    --hash=sha256:03d7aba805c74aa3846d2fb1fe936bf2f314230bbde70ca80220b5b27d122989 \
-    --hash=sha256:0602d1e0b06d2ca770ad452eba1f35525f302b2fc58e3c15722b056eaf9c4d37 \
-    --hash=sha256:080fa7e0393305b1c0565a79bdd6457de636fee4a07e02382eaa6ce583fc6375 \
-    --hash=sha256:0d10b1232b92233e6f226c60c488e2f7395e710b468fac65caf532f1f93be0bf \
-    --hash=sha256:0f687d4658cf9169585dfe493cb9013f3ddc12bc6ae1bd26ab48efac61204f47 \
-    --hash=sha256:0faf72bdc149cbd9ad19d72c12a014c4e04b8a6f8a5e7b088c338585490ca874 \
-    --hash=sha256:151b7aacecd9d95b1cad2301875b8b5d913fad8ab7ce8f6170116983c123592e \
-    --hash=sha256:1ac887a88ca1d50566d387b13594b489aa817b98a8290ba1250405e39080e8d2 \
-    --hash=sha256:1e52c60ddc726bc23bfb46a74cf34ef7b0c4e7c140b1c2d4ed6ffd59be9ca0d3 \
-    --hash=sha256:256184893b4e16dba218a68a1e011a4b34cd91dc5932291d67717c34af4bf104 \
-    --hash=sha256:257d0b1f33f4c1a1fed4c6e45b2a2b0266c93d2879a8c0714aa978adc3d61dc5 \
-    --hash=sha256:2a01e60781e2da9db8ebf3a5091d3d198bcaa0924d718fb7311186aea4d666d9 \
-    --hash=sha256:34b7c87141e9d2e2589072796a88c146cb3750d0560ee7b21d0a1288dbaaeabd \
-    --hash=sha256:3ac1e3d4ab6ae8076a262224d2bad919aa0f83f5d7fd62a872f8332de1eb1df4 \
-    --hash=sha256:3f3e54db3ab2c3ee7d3917f7394f8eaaf915c44e23e0e5216e68b718a928b4e8 \
-    --hash=sha256:42b9938a2fe9ba599ccbade23ac425ab518e8d33cb974703825248ebf505dc81 \
-    --hash=sha256:45303cd5ce15866799038a4bf00a1f756afcf78c908d129f5ddf23fd3f7d32e4 \
-    --hash=sha256:48a753fc63c53e5e9c82f157764f5e4fce7187fb8c57a220c3c1c8b262ddabed \
-    --hash=sha256:4bedb9759711548f2dd4ab818101f43562a505d0c0a22c2efc614165adb6762c \
-    --hash=sha256:5417012ed66a25c670375fc0deec1aae28eeffeb1380dbc29f62d8a7535fc373 \
-    --hash=sha256:549ae89b7b631ce24bc62dc976a8e35445ffd29529df8ec5958e01fb589d938c \
-    --hash=sha256:5b9322cdfc505826729af8847f59ede332deab81eeef84e7f01c1c3ab66864b9 \
-    --hash=sha256:5cbf413b8cc5fb0be5dee41a46dfbd4ff5fd12004886ae03dc3eff4284b06acf \
-    --hash=sha256:6567bcde8c860473b02321692e469b52f0b367fe83620d392d4e59730d1e2d3f \
-    --hash=sha256:685e230e7adc6fdf6295d4fa10feb20ca3dc25decf013aad052a63593396b3d3 \
-    --hash=sha256:68d9cda31c399604d7d39d802b00b274e0dd42aa9251743f26b2dcab11cd16b8 \
-    --hash=sha256:6bde94df44c950c76e644dcc49f86223c3069bcc1f77b4c74429b3930a0a60c2 \
-    --hash=sha256:6e7b33b11bdc74aac4d3e662ee56ad6817005b6df39258a97ad2f4862abe4adc \
-    --hash=sha256:75ae2aae9cffd29c27d80072308163ac2ec213b633d39299e95d51f6f0441a83 \
-    --hash=sha256:779b68a10067da4f7864927f666c404a46634efea5629d295923a7fd5aca2337 \
-    --hash=sha256:7c20ea5edc5824d9215248c76e58f4fe1a4bf1844b7b697daf1cfabfb2d4d79c \
-    --hash=sha256:7d36fe5de4a865b2dd16811dfe7c2334545076d4697271e14ab4a7c8b1ed81cc \
-    --hash=sha256:8bf598cf4ca11b76ce788ff0596feec2555a8875dd4bc3f8bb67f9056b0e01b5 \
-    --hash=sha256:8e33be66077fddab5c8db4743ec8c7f9f605d23a17a6c6e9f47411e191db9b62 \
-    --hash=sha256:990cc063985fa6eee99a1d0588c4b8e06eac64599d7878bd8edacbf6aa87415d \
-    --hash=sha256:9bb3fb64115a2e159270b6e90026f352c5f2e9d814a136a5d3ad69a317ec7576 \
-    --hash=sha256:a5f76fb9c38374c9ebcdcd29e4e8f724eaf591196c9d2081b862a5487d406edd \
-    --hash=sha256:a84ad8c86cb3b1afeaa006ac9574d66e255e1bb3048377f6593915fa16002d03 \
-    --hash=sha256:a8eb0bb5abe00c3374f1a2c44376b3c2896b4aefb5b350c550d31efa425a7ab8 \
-    --hash=sha256:a973163e0e2c488cc547752028f40c931d96a30e75c8b84c9d76b2f27bc356e4 \
-    --hash=sha256:aa8f16e0e06432d6d276607aeea4532ab4a2af3f1f63bbe47e8eec7771ae137f \
-    --hash=sha256:abbf4a541a199eece2749afdc5f59bf6ce8a5dbd5e34b0b30d422c8f41cec0a5 \
-    --hash=sha256:b1a9f85f32198e618b7b3584d8ad653ebe1a0c90f49e075884df1abe2c48c4e9 \
-    --hash=sha256:b4ad620961c3a38e008e9ca0c3663794e35e8544d9382a27f7adcf54334b0e36 \
-    --hash=sha256:b54963f5e44c5026495a9645ac77ff04c182a9f01c0041ca8df0df4ba26958e5 \
-    --hash=sha256:c15f1b34c294e1ae18246a1d04701db92542a8d3b275967667e874096b4f4a52 \
-    --hash=sha256:c71c9356b35b7ec286f95a6396ff7a691cbaa8af63ce50fce042ae08bcc2a703 \
-    --hash=sha256:caeadc08694af9ebeed89d9af46e1090930242db4932c90cf41e1deae553a581 \
-    --hash=sha256:cc4603ea272980bc515d5188cf0fc771c7ccfbc0f8226d89ed2cf77477f3eba4 \
-    --hash=sha256:d0b4f858c02b57b93763e53c0dde36d3ddeb9e5abc098573d96461b34377d550 \
-    --hash=sha256:d1fcb2020580ef9f14d1e9880f0be753435130767310bc3ea2bdabe827e9f78e \
-    --hash=sha256:d69cb3c0b87ec633e191da343ec33804470a6cc5039e1ee9f151b32f08d93599 \
-    --hash=sha256:d6ce59db4f145473f95a35f3c3f45b8c624fb1850bb30394605e779b3a99e645 \
-    --hash=sha256:f0349e49ec1eca7ec920ff8fa46963c2e39f6074e1d89ed9eae9991b7dd20408 \
-    --hash=sha256:f0706d2a0b3a6a7ded71c716b796dd965e9428abff84e10db841e260213661cb \
-    --hash=sha256:f232bb7cd89c5edb12f0e5a917fc6346c0ea3447340fe45da05f2158b6f2c484
+ast-serialize==0.12.1 \
+    --hash=sha256:09cc4d3103c1fc97f6845ba307af1db9cde5226bef47f8843220dde83f2276ba \
+    --hash=sha256:0f93a70fa9826c04ea9f2c3a880f87f4cca09a828144ed5084682abd28110980 \
+    --hash=sha256:10b59afc108eb285146acb23d1b5ec0fc58bb3c09cb2ab8876402df06c373c3b \
+    --hash=sha256:119d1b0cadaba4a6e475f9bbe79eecc79351e373142eabe7c353f0250d70aebb \
+    --hash=sha256:1858887be56a64a2aea899423dfe43787c34c75c18b0d7497de8e618d54b2790 \
+    --hash=sha256:243054a05a5190f5d087b5c8b16423e7f1cefa4991bac26e9c8ace18074b75b6 \
+    --hash=sha256:3398e458047d21c9bc1b323fe5aab77c608dc9ddb65b2d44deebaff503a1f1eb \
+    --hash=sha256:3d6ed63d4fc1ec867b8cb522d58c36df0e8f05e487bea0ffd102043a37636d72 \
+    --hash=sha256:410233de149ab8414cb27c6fc73e9d2baa35d6f971672d540d752060d980ffb4 \
+    --hash=sha256:45a9e6b700bbd973d49942668a5cdbeffa693f2e250b8a5409abd1fa9d351854 \
+    --hash=sha256:4655ef993e69e01bb47d2d99647de9bbb74af03938438656832cd010d95de348 \
+    --hash=sha256:50a9eaedf1db4857dad7cc47dd757ed70bfcc40b89d44d516c4a2f0d5033bd76 \
+    --hash=sha256:5285a390caf1c44368ae270f037f797b91427d138b7d43cad0f1fda4c83518d9 \
+    --hash=sha256:536d783c4d91331f094e0a892221e619be5ffbe6fb6640885f14d7f226ec90ca \
+    --hash=sha256:5bbf582286c9dc6b4c544ef645dc99e4b3aa09db28892bc60344141f6926641f \
+    --hash=sha256:5ef62601db3ce5c23445132262a193075e211fb2fc87b46b7550dd351fac0976 \
+    --hash=sha256:5fc136cd08001b817ad0b3e7426f50a7d2b8982dc7c6491f0af78af4c3dd8672 \
+    --hash=sha256:610a41351de68199de9a1434499083b4256c0df7658ec1cfc0a0a7b20b08d317 \
+    --hash=sha256:6485e681625ed7a094221f16a7ff2ef154946112266a05cf83bde50c959ef345 \
+    --hash=sha256:657a7354ea16ed4d29f8127ed477c6fee3915c111d135f020ca835a991438e90 \
+    --hash=sha256:6add54b495e37ae3cf3a1f0d5eaba364814eb72e93026adc41b7791e4b0d45d3 \
+    --hash=sha256:6e25cd319fb0d7b39fcac666784ec86708ccbc78d07a698b1400cf5ed40c045b \
+    --hash=sha256:6ff65f40f49d5e1a1a043ba366081d59a4e26a9f5c1b07eb1170e172115da7ca \
+    --hash=sha256:72e871f6995a066c1b19104f8a6b5832b1163adb9a8267c2aa4711fbb0f4d1f3 \
+    --hash=sha256:7b1ad06513022cfa1337744959255af0ef16119d2beb1e547b67f37ad9433d4a \
+    --hash=sha256:7d9fbe5a3e8acddfc2fddff3dbbc7ea0e9798b3df3428f851b8abc52a3806f31 \
+    --hash=sha256:82866f3523d53ffca8d2a69a750bec52908b69f728012e40959bebce2620453c \
+    --hash=sha256:89a2bc39a820bc7785b60c53a5742b4e8dd4c1a599294e2dd68fae545883d44a \
+    --hash=sha256:8a32f184ce3e4b1d0b06d642a1243281cf55b99e0323680b1b8f904029fd7700 \
+    --hash=sha256:8d6711adf11136c77e3a35517de9488a5081d1012874fae99c2876b64f4daace \
+    --hash=sha256:9649cd903db0dc047906c6dd740784a2ba665d54f7e43ba31457edbce76c9493 \
+    --hash=sha256:98d91cd3a6cb76a39512ee090a539d1e3206b732ad8150eb38918cffa1ddf515 \
+    --hash=sha256:99e33c93efb5254a70c525b46038212371dfe5693d48eb2d0d5f17d936a263d7 \
+    --hash=sha256:9a0cbab9796e6ce841197feeba4008faa96b4cc7741129542fd81c882d7a4f01 \
+    --hash=sha256:9e855adfa5bb982b2e6fe09056b2d584f6dd4fce085d91a07d1155683751b6b5 \
+    --hash=sha256:9eb9de7e59621acdb3e66984f374272b33d56d15a04763e2fd0604211e1c8303 \
+    --hash=sha256:a1d8267f83c613ea0a31f2518df074bd62e98a4b3a4892f6a529d74e08e02dba \
+    --hash=sha256:a513bc6f60980d01767f7cbe39b17ce0373e722824a74ce28d6cea49ee3c8460 \
+    --hash=sha256:a5628a12acc875fe7a167910f18d101dd101c2a7b1e6c2b6f7289ffaff25805c \
+    --hash=sha256:a5cac246474d2a703147d1605a6ac5ba0fa9e0a443cf1cf42513adf4df02686f \
+    --hash=sha256:a9cd24a26126088693ca054547ea0a391398a29cf1a3a2bec1009b4b6acc8b82 \
+    --hash=sha256:aa6c17a2b7f07e81fa8cfcc4aa7c832b3e57733853aebea113ab502f9b0963db \
+    --hash=sha256:af699e81fd7ce80b8b03945826d8ea23dd36d072f10d4613402da597ba4ee9c6 \
+    --hash=sha256:b3cd105995942cc6163a229674a86161ba1305f646493efd59bd6723a357ee14 \
+    --hash=sha256:b4282695f1d51a3c6ef76560351bad5af880eff7d755aefea325bffb9bf68c25 \
+    --hash=sha256:b9a2310845302f1a6bd45ae8a67d5760211103a8d66410b854bfa440d107e093 \
+    --hash=sha256:bac5a99a2c91dd823be9b8c44645694fccbb0750773cc5b27889a9f6f22fce89 \
+    --hash=sha256:c30b609e8fea426b310543126de876592236a25aa8ebd59f1e2b323dd52a4085 \
+    --hash=sha256:c42d2d65f388d1960c5796231eb9bf5a988c46228633eb489605c4549ad16c52 \
+    --hash=sha256:c9e2a592706fd791c2271ce9c8f4e38c98d3ea0b4a86b511e09a4fe3ac44ab37 \
+    --hash=sha256:cbe239bee4bd609186daf60b95b7b0f47146c7f7f55f6da83807d747d6fe753f \
+    --hash=sha256:d3d516da3463071d27e64caf54d88cba25cf4ad4afcc807e0bcf67743719f03e \
+    --hash=sha256:e62126ac2be2d9340ac1b3ee7a0466a883ecbed634cff0929c88ca0b671483b7 \
+    --hash=sha256:e73255c9227fd74eac8a9b55c4049e8ad7b66d1f690bf827c98a86b2e594def7 \
+    --hash=sha256:f4ac042e95a575432c1730ca4cb9183066a2074886a599f46c1f1b0955fb8198 \
+    --hash=sha256:f896fa38e0af38821e1ab1425c5dee89e359623e165765bdeae7d0eb6909e76d \
+    --hash=sha256:fafe1471e8aca6c87b4913b7b54ff97197adf702fbe28692284b929dfa62ff96
     # via mypy
 certifi==2026.7.22 \
     --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
@@ -376,9 +376,9 @@ feedparser-sgmllib==2.1.0 \
     --hash=sha256:2cab2d43b95a954f920f18aebce7a4dbbb3f539780b127e2aa114f579821e01d \
     --hash=sha256:61facf2918c4389b5b00714f76c5e03431ffcd94cd1f51d657edd6cd7c396579
     # via feedparser
-filelock==4.0.9 \
-    --hash=sha256:635e7d67fa92654eed444e75e9ca18426d34e77ad9c469bf4373f75a932f7b22 \
-    --hash=sha256:9287fd61b99a806e5202be29a83034c0808a1b9830e820537c2f5773981f7eeb
+filelock==4.0.12 \
+    --hash=sha256:5f17ee83ecee8a6f3e389c75822fb70a1c2f0506b99438a6dffa1d56793588c8 \
+    --hash=sha256:cf42711a7ac791818b299fab0332a088c65aeeefa36290de98db92c434303b0c
     # via torch
 fsspec==2026.9.0 \
     --hash=sha256:0f08147951c8cb31d844c3547d631053b127863b60be04cf06e121333ee0e2fe \
@@ -1756,9 +1756,9 @@ typing-inspection==0.4.4 \
     #   fastapi
     #   pydantic
     #   pydantic-settings
-tzdata==2026.4 \
-    --hash=sha256:c2169a8b0a7a5e9674da5a135ccdfb2b3e671b333ed9fed17b41f73c34476e81 \
-    --hash=sha256:f1b8bd365d8d210c55353f4d7f8d6d8561c0ba50d704b700d195a9424bba0d79
+tzdata==2026.5 \
+    --hash=sha256:8cc73c0a0bfca7dbfa59235d60b2eff82231dee33f53d206db1acd9173cfc0a7 \
+    --hash=sha256:b683bd1b6659ddcd810ff02ad09ba821d4bf1065072805063eb35c49617905ac
     # via
     #   nexus-scalp-engine (pyproject.toml)
     #   psycopg

requirements.txt

@@ -39,5 +39,5 @@ typer==0.27.2
 types-pyyaml==6.0.12.20260906
 types-requests==2.33.0.20260906
 types-setuptools==84.0.0.20260812
-tzdata==2026.4
+tzdata==2026.5
 uvicorn==0.54.0