twothatITandClaude Sonnet 5
6b5cbc722f
Bumps every flagged dependency to its patched (or latest compatible) version: python-jose 3.3.0->3.4.0 (2 critical algorithm-confusion alerts), cryptography 41.0.7->50.0.0 (7 alerts incl. a Bleichenbacher timing oracle and outdated bundled OpenSSL), python-multipart 0.0.6->0.0.31 (9 alerts, incl. a high-severity arbitrary file write), Jinja2 3.1.2->3.1.6 (5 sandbox breakout / HTML injection alerts), and pytest 7.4.3->9.0.3 (1 alert, dev-only). msal had to move 1.28.0->1.39.0 because it pinned cryptography<45; httpx had to move 0.26.0->0.28.1 and pytest-asyncio 0.23.2->1.4.0 and pytest-httpx 0.28.0->0.36.2 to keep the dependency set resolvable together with the above. Verified with a full Docker build and a running container (health check, settings load, DB migrations all green). Co-Authored-By: Claude Sonnet 5 <[email protected]>
29 lines
524 B
Plaintext
29 lines
524 B
Plaintext
# NetBird MSP Appliance - Python Dependencies
|
|
fastapi==0.104.1
|
|
uvicorn[standard]==0.24.0
|
|
sqlalchemy==2.0.23
|
|
aiosqlite==0.19.0
|
|
pydantic==2.5.2
|
|
pydantic-settings==2.1.0
|
|
python-jose[cryptography]==3.4.0
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.1.2
|
|
cryptography==50.0.0
|
|
python-multipart==0.0.31
|
|
httpx==0.28.1
|
|
jinja2==3.1.6
|
|
docker==7.0.0
|
|
requests<2.32.0
|
|
urllib3<2
|
|
psutil==5.9.7
|
|
pyyaml==6.0.1
|
|
msal==1.39.0
|
|
pyotp==2.9.0
|
|
qrcode[pil]==7.4.2
|
|
slowapi==0.1.9
|
|
pywinrm>=0.4.3
|
|
ldap3>=2.9.1
|
|
pytest==9.0.3
|
|
pytest-asyncio==1.4.0
|
|
pytest-httpx==0.36.2
|