Compare commits

..
2 Commits
Author SHA1 Message Date
twothatITandClaude Sonnet 5 4078295ea9 chore(release): bump version to 1.6.1
Co-Authored-By: Claude Sonnet 5 <[email protected]>
2026-10-20 08:42:12 +02:00
twothatITandClaude Sonnet 5 6b5cbc722f fix(deps): resolve all 25 open Dependabot alerts
Bumps every flagged dependency to its patched (or latest compatible)
version: python-jose 3.3.0->3.4.0 (2 critical algorithm-confusion alerts),
cryptography 41.0.7->50.0.0 (7 alerts incl. a Bleichenbacher timing oracle
and outdated bundled OpenSSL), python-multipart 0.0.6->0.0.31 (9 alerts,
incl. a high-severity arbitrary file write), Jinja2 3.1.2->3.1.6 (5 sandbox
breakout / HTML injection alerts), and pytest 7.4.3->9.0.3 (1 alert,
dev-only).

msal had to move 1.28.0->1.39.0 because it pinned cryptography<45;
httpx had to move 0.26.0->0.28.1 and pytest-asyncio 0.23.2->1.4.0 and
pytest-httpx 0.28.0->0.36.2 to keep the dependency set resolvable
together with the above. Verified with a full Docker build and a running
container (health check, settings load, DB migrations all green).

Co-Authored-By: Claude Sonnet 5 <[email protected]>
2026-10-20 08:42:03 +02:00
2 changed files with 10 additions and 10 deletions
+1 -1
View File
@@ -34,7 +34,7 @@ logger = logging.getLogger(__name__)
app = FastAPI( app = FastAPI(
title="NetBird MSP Appliance", title="NetBird MSP Appliance",
description="Multi-tenant NetBird management platform for MSPs", description="Multi-tenant NetBird management platform for MSPs",
version="1.6.0", version="1.6.1",
docs_url="/api/docs", docs_url="/api/docs",
redoc_url="/api/redoc", redoc_url="/api/redoc",
openapi_url="/api/openapi.json", openapi_url="/api/openapi.json",
+9 -9
View File
@@ -5,24 +5,24 @@ sqlalchemy==2.0.23
aiosqlite==0.19.0 aiosqlite==0.19.0
pydantic==2.5.2 pydantic==2.5.2
pydantic-settings==2.1.0 pydantic-settings==2.1.0
python-jose[cryptography]==3.3.0 python-jose[cryptography]==3.4.0
passlib[bcrypt]==1.7.4 passlib[bcrypt]==1.7.4
bcrypt==4.1.2 bcrypt==4.1.2
cryptography==41.0.7 cryptography==50.0.0
python-multipart==0.0.6 python-multipart==0.0.31
httpx==0.26.0 httpx==0.28.1
jinja2==3.1.2 jinja2==3.1.6
docker==7.0.0 docker==7.0.0
requests<2.32.0 requests<2.32.0
urllib3<2 urllib3<2
psutil==5.9.7 psutil==5.9.7
pyyaml==6.0.1 pyyaml==6.0.1
msal==1.28.0 msal==1.39.0
pyotp==2.9.0 pyotp==2.9.0
qrcode[pil]==7.4.2 qrcode[pil]==7.4.2
slowapi==0.1.9 slowapi==0.1.9
pywinrm>=0.4.3 pywinrm>=0.4.3
ldap3>=2.9.1 ldap3>=2.9.1
pytest==7.4.3 pytest==9.0.3
pytest-asyncio==0.23.2 pytest-asyncio==1.4.0
pytest-httpx==0.28.0 pytest-httpx==0.36.2