Skip to content

Fix vulnerable dependency versions - #267

Merged
phantom-jacob merged 2 commits into
mainfrom
codex/vuln-fixes
Oct 6, 2026
Merged

phantom-jacob merged 2 commits into
mainfrom
codex/vuln-fixes

Conversation

@athreya-splunk

Copy link
Copy Markdown
Contributor

Summary

Remediate the dependency findings in VULN-113682, VULN-118166, and VULN-113604:

  • Upgrade sqlparse to 0.6.0.
  • Upgrade anyio to 4.15.1 (the ticket's fixed version is 4.14.2).
  • Raise the Django minimum to 5.2.17 in project and pre-commit requirements.

Validation

  • uv lock --check passed.
  • /Users/atkm/.local/bin/pre-commit run --all-files passed.
  • Repo tests: 54 passed (48 non-Docker cases and all 10 package dependency cases with Docker access).

@phantom-jacob
phantom-jacob merged commit e8cedcb into main Oct 6, 2026
4 checks passed
@phantom-jacob
phantom-jacob deleted the codex/vuln-fixes branch October 6, 2026 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants