akadmin/headroom
1
0
Fork 0
mirror of https://github.com/headroomlabs-ai/headroom.git synced 2026-08-27 14:17:10 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(deps): enforce audited transitive dependency floors

Browse source
This commit is contained in:
JD Davis 2026-08-04 21:52:24 -05:00
parent 0fd0b996a4
commit 21f530ef9b
2 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
pyproject.toml
View file

@ -363,6 +363,10 @@ constraint-dependencies = [
"transformers>=5.5.0",
# PYSEC-2026-3447 — transitive dependency; fix at 83.0.0
"setuptools>=83.0.0",
# PYSEC-2026-3545/3546/3547 — transitive HTTP/WebSocket parser fixes
"aiohttp>=3.14.3",
# PYSEC-2026-3552/3553/3554 — PKCS#7 and certificate verification fixes
"cryptography>=50.0.0",
]
# Pin the project's package index to public PyPI. Without this, `uv lock`

4
uv.lock generated
View file

@ -19,6 +19,8 @@ resolution-markers = [
[manifest]
constraints = [
{ name = "aiohttp", specifier = ">=3.14.3" },
{ name = "cryptography", specifier = ">=50.0.0" },
{ name = "gitpython", specifier = ">=3.1.50" },
{ name = "langsmith", specifier = ">=0.9.0" },
{ name = "lxml-html-clean", specifier = ">=0.4.5" },
@ -1678,7 +1680,7 @@ wheels = [
[[package]]
name = "headroom-ai"
version = "0.33.0"
version = "0.34.0"
source = { editable = "." }
dependencies = [
{ name = "ast-grep-cli" },