Skip to content

chore(deps): patch CVEs + bump claude-agent-sdk, action-gh-release#137

Merged
datasciencemonkey merged 1 commit intomainfrom
depman
Apr 19, 2026
Merged

chore(deps): patch CVEs + bump claude-agent-sdk, action-gh-release#137
datasciencemonkey merged 1 commit intomainfrom
depman

Conversation

@datasciencemonkey
Copy link
Copy Markdown
Owner

@datasciencemonkey datasciencemonkey commented Apr 19, 2026

  • cryptography 46.0.6 → 46.0.7 (fixes GHSA-p423-j2cm-9vmq)
  • python-multipart 0.0.22 → 0.0.26 (fixes GHSA-mj87-hwqh-73pj)
  • claude-agent-sdk 0.1.54 → 0.1.58
  • softprops/action-gh-release v2 → v3 SHA pin
  • Remove --ignore-vuln flags from CI audit (both CVEs now patched)
  • Regenerate requirements.lock with hashes

What does this PR do?

Testing

Please test your changes on dogfood before merging.

  • Deployed and tested on dogfood
  • Added a screenshot to this PR

- cryptography 46.0.6 → 46.0.7 (fixes GHSA-p423-j2cm-9vmq)
- python-multipart 0.0.22 → 0.0.26 (fixes GHSA-mj87-hwqh-73pj)
- claude-agent-sdk 0.1.54 → 0.1.58
- softprops/action-gh-release v2 → v3 SHA pin
- Remove --ignore-vuln flags from CI audit (both CVEs now patched)
- Regenerate requirements.lock with hashes
@datasciencemonkey datasciencemonkey self-assigned this Apr 19, 2026
@datasciencemonkey
Copy link
Copy Markdown
Owner Author

I didnt test on dog food - test passed on FEVM
image

@datasciencemonkey datasciencemonkey merged commit 2f07175 into main Apr 19, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant