Skip to content
This repository was archived by the owner on Oct 11, 2026. It is now read-only.

fix(api): resolve Python dependency alerts - #114

Merged
Roddygithub merged 2 commits into
mainfrom
fix/python-security-alerts
Aug 1, 2026
Merged

Roddygithub merged 2 commits into
mainfrom
fix/python-security-alerts

Conversation

@Roddygithub

Copy link
Copy Markdown
Owner

Summary

  • upgrade OpenTelemetry packages to the 1.44 / 0.65b0 train
  • remove the old setuptools<80 workaround
  • refresh uv.lock so protobuf resolves to 7.35.1 and setuptools leaves the runtime graph

Validation

  • uv lock --check
  • uv run --package gw2analytics_api python -c "from opentelemetry.instrumentation.fastapi import FastAPIInstrumentor; from opentelemetry.instrumentation.redis import RedisInstrumentor; from opentelemetry.instrumentation.sqlalchemy import SQLAlchemyInstrumentor; import google.protobuf; print('otel imports ok', google.protobuf.version)"
  • uv run --group dev ruff check apps/api/src/gw2analytics_api/observability.py apps/api/src/gw2analytics_api/database.py apps/api/src/gw2analytics_api/main.py apps/api/src/gw2analytics_api/config.py
  • uv run --group dev pip-audit --desc off

Note

  • uv run --group dev pytest apps/api/tests/test_observability.py is blocked locally because Postgres is not listening on 127.0.0.1:5432; CI should cover this with its service container.

Signed-off-by: Roddy <roddy@users.noreply.github.com>
Signed-off-by: Roddy <roddy@users.noreply.github.com>
@Roddygithub
Roddygithub merged commit a1dd3d0 into main Aug 1, 2026
11 checks passed
@Roddygithub
Roddygithub deleted the fix/python-security-alerts branch August 1, 2026 20:20
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant