Skip to content

security: update Pygments and requests to fix vulnerabilities#108

Closed
robcohen wants to merge 1 commit intomainfrom
security/update-deps
Closed

security: update Pygments and requests to fix vulnerabilities#108
robcohen wants to merge 1 commit intomainfrom
security/update-deps

Conversation

@robcohen
Copy link
Copy Markdown
Member

@robcohen robcohen commented Apr 3, 2026

Summary

Fixes 2 Dependabot security alerts:

Alert Package Fix Severity
GHSA-5239-wwwm-4pmq Pygments 2.19.2 → 2.20.0 Moderate (ReDoS)
GHSA-gc5v-m9x4-r6x2 requests 2.32.5 → 2.33.1 Low (temp file)

Changes

  • Updated requests>=2 to requests>=2.33 in pyproject.toml
  • Regenerated uv.lock with updated versions

🤖 Generated with Claude Code

- Pygments 2.19.2 → 2.20.0 (fixes GHSA-5239-wwwm-4pmq ReDoS)
- requests 2.32.5 → 2.33.1 (fixes GHSA-gc5v-m9x4-r6x2 temp file)
@robcohen
Copy link
Copy Markdown
Member Author

robcohen commented Apr 3, 2026

Superseded by #109 which includes all dependency upgrades

@robcohen robcohen closed this Apr 3, 2026
@robcohen robcohen deleted the security/update-deps branch April 3, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant