From f43f2449cdfd36d453a7b6249c807527d1fe19f0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 06:36:39 +0000 Subject: [PATCH] build(deps): bump the python-deps group across 1 directory with 9 updates Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [psycopg2-binary](https://github.com/psycopg/psycopg2), [pyjwt](https://github.com/jpadilla/pyjwt), [cryptography](https://github.com/pyca/cryptography), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy) and [oracledb](https://github.com/oracle/python-oracledb) to permit the latest version. Updates `uvicorn` from 0.52.3 to 0.53.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.52.3...0.53.0) Updates `sqlalchemy` from 2.0.52 to 2.0.54 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` from 1.19.1 to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `psycopg2-binary` to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/compare/2.9.12...2.9.13) Updates `pyjwt` from 2.13.0 to 2.14.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0) Updates `cryptography` from 50.0.0 to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1) Updates `ruff` from 0.16.3 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.8) Updates `mypy` from 2.3.0 to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.3.0...v2.3.1) Updates `oracledb` to 26.0.0 - [Release notes](https://github.com/oracle/python-oracledb/releases) - [Commits](https://github.com/oracle/python-oracledb/compare/v4.0.2...v26.0.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production dependency-group: python-deps - dependency-name: pyjwt dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: oracledb dependency-version: 26.0.0 dependency-type: direct:production dependency-group: python-deps ... Signed-off-by: dependabot[bot] --- backend/requirements-oracle.txt | 2 +- backend/requirements.txt | 16 ++++++++-------- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/backend/requirements-oracle.txt b/backend/requirements-oracle.txt index b43383f..e03c29e 100644 --- a/backend/requirements-oracle.txt +++ b/backend/requirements-oracle.txt @@ -9,4 +9,4 @@ # Docker image therefore bundles Instant Client 19.32, which can connect to # Oracle Database 11.2 and newer. The high-level API used here (connect, # cursor, execute, init_oracle_client, and call_timeout) is stable in 4.x. -oracledb>=4.0.2,<5 +oracledb>=26.0.0,<27 diff --git a/backend/requirements.txt b/backend/requirements.txt index 179fac6..f10cba2 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -2,16 +2,16 @@ # fastapi 0.138.x drops Starlette's upper bound, letting us pull a Starlette # release with no open advisories (CVE remediation — see requirements.lock). fastapi==0.141.1 -uvicorn[standard]==0.52.3 +uvicorn[standard]==0.53.0 # Configuration pydantic-settings==2.15.0 # Database - PostgreSQL -sqlalchemy==2.0.52 -alembic==1.19.1 +sqlalchemy==2.0.54 +alembic==1.20.0 asyncpg>=0.31.0 -psycopg2-binary>=2.9.12 +psycopg2-binary>=2.9.13 # Oracle connectivity (optional — install separately; see requirements-oracle.txt) # python-oracledb is imported lazily inside ConnectionService.test_connection() @@ -21,11 +21,11 @@ psycopg2-binary>=2.9.12 apscheduler==3.11.3 # Auth -PyJWT==2.13.0 +PyJWT==2.14.0 bcrypt==5.0.0 # Encryption (credential storage at rest) -cryptography==50.0.0 +cryptography==50.0.1 # Logging structlog==26.1.0 @@ -39,5 +39,5 @@ pytest-asyncio==1.4.0 pytest-cov==7.1.0 # Linting and type checking -ruff==0.16.3 -mypy==2.3.0 +ruff==0.16.8 +mypy==2.3.1