Skip to content
This repository was archived by the owner on May 11, 2026. It is now read-only.
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ aiohappyeyeballs==2.3.4
aiohttp==3.10.0
aiosignal==1.3.1
annotated-types==0.7.0
anyio==4.4.0
anyio==4.9.0
asgiref==3.8.1
asttokens==2.4.1
async-timeout==4.0.3
Expand Down Expand Up @@ -40,7 +40,7 @@ eth_abi==5.1.0
exceptiongroup==1.2.2
executing==2.0.1
fastapi==0.111.0
fastapi-cli==0.0.4
fastapi-cli==0.0.7
filelock==3.15.4
flatbuffers==24.3.25
frozenlist==1.4.1
Expand All @@ -50,9 +50,9 @@ googleapis-common-protos==1.63.2
grpcio==1.65.2
h11==0.14.0
hexbytes==1.2.1
httpcore==1.0.5
httpcore==1.0.7
httptools==0.6.1
httpx==0.27.0
httpx==0.28.1
Comment thread
cursor[bot] marked this conversation as resolved.
huggingface-hub==0.24.5
humanfriendly==10.0
identify==2.6.0
Expand Down Expand Up @@ -126,7 +126,7 @@ pysha3==1.0.2
pytest==8.3.2
python-dateutil==2.9.0.post0
python-dotenv==1.0.1
python-multipart==0.0.9
python-multipart==0.0.20
pyunormalize==15.1.0
PyYAML==6.0.1
referencing==0.35.1
Expand All @@ -142,7 +142,7 @@ shellingham==1.5.4
six==1.16.0
sniffio==1.3.1
SQLAlchemy==2.0.31
starlette==0.37.2
starlette==0.46.2

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Incompatible dependency versions: fastapi pinned but deps upgraded

High Severity

fastapi==0.111.0 was not upgraded to 0.135.1 as the PR intended, but transitive dependencies were upgraded to versions compatible only with 0.135.1. Specifically, starlette was bumped from 0.37.2 to 0.46.2, while fastapi==0.111.0 requires starlette>=0.37.2,<0.38.0. Similarly, httpx was upgraded to 0.28.1, which removed the app argument that older Starlette's TestClient relied on. This version mismatch will cause pip dependency resolution failures or runtime errors.

Additional Locations (2)

Fix in Cursor Fix in Web

sympy==1.13.1
tavily-python==0.3.5
tenacity==8.5.0
Expand Down
9 changes: 5 additions & 4 deletions scripts/python/server.py
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
from typing import Union
from typing import Optional

from fastapi import FastAPI

app = FastAPI()
Expand All @@ -10,17 +11,17 @@ def read_root():


@app.get("/items/{item_id}")
def read_item(item_id: int, q: Union[str, None] = None):
def read_item(item_id: int, q: Optional[str] = None):
return {"item_id": item_id, "q": q}


@app.get("/trades/{trade_id}")
def read_trade(trade_id: int, q: Union[str, None] = None):
def read_trade(trade_id: int, q: Optional[str] = None):
return {"trade_id": trade_id, "q": q}


@app.get("/markets/{market_id}")
def read_market(market_id: int, q: Union[str, None] = None):
def read_market(market_id: int, q: Optional[str] = None):
return {"market_id": market_id, "q": q}


Expand Down