Skip to content

Resolved dependabot security alerts - #39

Merged
embarquech merged 6 commits into
mainfrom
fix/dependabot_security
Apr 9, 2026
Merged

embarquech merged 6 commits into
mainfrom
fix/dependabot_security

Conversation

@YanNaingWinn

Copy link
Copy Markdown
Contributor

No description provided.

@YanNaingWinn
YanNaingWinn requested a review from embarquech April 7, 2026 10:35
YanNaingWinn and others added 5 commits April 9, 2026 13:40
Add explicit minimum version constraints to dev-requirements.txt to resolve
OSV-scanner security alerts:
- protobuf>=5.29.6 (GHSA-7gcm-g887-7qv7, CVSS 8.2)
- python-multipart>=0.0.22 (GHSA-59g5-xgcq-4qw3 + GHSA-wp53-j4wj-2cfg, CVSS 8.7/8.6)
- zipp>=3.19.1 (GHSA-jfmj-5v4g-7637, CVSS 6.9)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@embarquech
embarquech merged commit 0893dcc into main Apr 9, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants