Commit a078096
committed
chore(deps): bump Python deps in docs/uv.lock for security fixes
Resolve open Dependabot security alerts by upgrading transitive Python
dependencies in docs/uv.lock to their first patched versions or newer:
- urllib3 2.6.3 -> 2.7.0
GHSA-qccp-gfcp-xxvc (high), GHSA-mf9v-mfxr-j63j (high)
- idna 3.11 -> 3.18
GHSA-65pc-fj4g-8rjx (medium)
- starlette 0.52.1 -> 1.2.1
GHSA-86qp-5c8j-p5mr (medium)
- requests 2.32.5 -> 2.34.2
GHSA-gc5v-m9x4-r6x2 (medium)
- Pygments 2.19.2 -> 2.20.0
GHSA-5239-wwwm-4pmq (low)
Updated via `uv lock --upgrade-package` (uv 0.10.12, matching the pinned
required-version range) so version and artifact hashes stay consistent;
pyproject.toml is unchanged. Verified with `uv lock --check` and
`uv sync --locked`.1 parent 19c31d4 commit a078096
1 file changed
Lines changed: 15 additions & 15 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments