Skip to content

Update dependencies to fix vulnerabilities (2026-10-26) - #181

Merged
ArBridgeman merged 7 commits into
mainfrom
dependency-update/2026-10-26
Oct 28, 2026
Merged

ArBridgeman merged 7 commits into
mainfrom
dependency-update/2026-10-26

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

closes #183

Automated dependency update for poetry.lock.
This PR was created by the workflow dependency-update.yml

Remaining vulnerable dependencies after the automated update:

[
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112906",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112940",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112914",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112913",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112937",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112907",
    "fix_versions": [
      "4.2.1"
    ]
  }
]

@github-actions github-actions Bot added the security Security related change label Oct 26, 2026
@ArBridgeman
ArBridgeman deployed to manual-approval October 28, 2026 11:11 — with GitHub Actions Active
@ArBridgeman
ArBridgeman deployed to manual-approval October 28, 2026 11:11 — with GitHub Actions Active
@sonarqubecloud

Copy link
Copy Markdown

@ArBridgeman
ArBridgeman merged commit 552aa0b into main Oct 28, 2026
43 checks passed
@ArBridgeman
ArBridgeman deleted the dependency-update/2026-10-26 branch October 28, 2026 11:58

This branch was successfully deployed

1 active deployment
manual-approval — f1bc417b Deployed Oct 28, 2026 by ArBridgeman via Merge Gate / Approve Running Slow Tests? #575
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Security related change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update to PTB 12.0.0 and remove Python 3.10 support

2 participants