Skip to content

Commit a078096

Browse files
committed
chore(deps): bump Python deps in docs/uv.lock for security fixes
Resolve open Dependabot security alerts by upgrading transitive Python dependencies in docs/uv.lock to their first patched versions or newer: - urllib3 2.6.3 -> 2.7.0 GHSA-qccp-gfcp-xxvc (high), GHSA-mf9v-mfxr-j63j (high) - idna 3.11 -> 3.18 GHSA-65pc-fj4g-8rjx (medium) - starlette 0.52.1 -> 1.2.1 GHSA-86qp-5c8j-p5mr (medium) - requests 2.32.5 -> 2.34.2 GHSA-gc5v-m9x4-r6x2 (medium) - Pygments 2.19.2 -> 2.20.0 GHSA-5239-wwwm-4pmq (low) Updated via `uv lock --upgrade-package` (uv 0.10.12, matching the pinned required-version range) so version and artifact hashes stay consistent; pyproject.toml is unchanged. Verified with `uv lock --check` and `uv sync --locked`.
1 parent 19c31d4 commit a078096

1 file changed

Lines changed: 15 additions & 15 deletions

File tree

docs/uv.lock

Lines changed: 15 additions & 15 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)