1811afa749
- fastapi 0.115.0 → 0.135.1 pulls starlette 0.52.1 (fixes CVE-2024-47874, CVE-2025-54121) - pip-audit: ignore CVE-2024-23342 (ecdsa Minerva attack, no fix exists; app uses HS256 only) - Update auth guard tests: FastAPI 0.135 returns 401 (not 403) when Bearer token is missing
25 lines
478 B
Plaintext
25 lines
478 B
Plaintext
# Requires Python 3.13+ (3.14 not yet supported by pydantic-core)
|
|
fastapi==0.135.1
|
|
uvicorn[standard]==0.30.6
|
|
sqlalchemy[asyncio]==2.0.35
|
|
aiosqlite==0.20.0
|
|
alembic==1.13.3
|
|
pydantic==2.9.2
|
|
pydantic-settings==2.5.2
|
|
python-jose[cryptography]==3.5.0
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.0.1
|
|
python-multipart==0.0.22
|
|
apscheduler==3.10.4
|
|
python-nmap==0.7.1
|
|
pyyaml==6.0.2
|
|
websockets==13.1
|
|
httpx==0.27.2
|
|
|
|
# Dev
|
|
ruff==0.6.9
|
|
mypy==1.11.2
|
|
pytest==8.3.3
|
|
pytest-asyncio==0.24.0
|
|
pytest-cov==5.0.0
|