Commit 86b8077c authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

build: fix CVEs

parent cbe17d1d

poetry.lock

+11 −11
Original line number Diff line number Diff line 
# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand.

# This file is automatically @generated by Poetry 2.4.1 and should not be changed by hand.



[[package]]

name = "anyio"
@@ -76,18 +76,18 @@ files = [ 


[[package]]

name = "idna"

version = "3.10"

version = "3.17"

description = "Internationalized Domain Names in Applications (IDNA)"

optional = false

python-versions = ">=3.6"

python-versions = ">=3.9"

groups = ["main"]

files = [

    {file = "idna-3.10-py3-none-any.whl", hash = "sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3"},

    {file = "idna-3.10.tar.gz", hash = "sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9"},

    {file = "idna-3.17-py3-none-any.whl", hash = "sha256:466e48829084efe2548012b855df21540b96f2e20e51bd124c851536556a592c"},

    {file = "idna-3.17.tar.gz", hash = "sha256:5eb0cb53bc467c12eadcf6de83163ad8527cec9416f44b9b61b19caedad2b87f"},

]



[package.extras]

all = ["flake8 (>=7.1.1)", "mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]

all = ["mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]



[[package]]

name = "ruff"
@@ -164,14 +164,14 @@ files = [ 


[[package]]

name = "urllib3"

version = "2.6.3"

version = "2.7.0"

description = "HTTP library with thread-safe connection pooling, file post, and more."

optional = false

python-versions = ">=3.9"

python-versions = ">=3.10"

groups = ["main"]

files = [

    {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"},

    {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"},

    {file = "urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897"},

    {file = "urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c"},

]



[package.extras]
@@ -202,4 +202,4 @@ standard = ["colorama (>=0.4) ; sys_platform == \"win32\"", "httptools (>=0.6.3) 
[metadata]

lock-version = "2.1"

python-versions = ">=3.12"

content-hash = "8c7652b8c398d66b9a8d8c653f553ae7ebe5c77042d7550e7b16b27c6d403f54"
 
content-hash = "94d23fec550dbfd0e193c33b40846019aea8706e60aa0a2c395e3608ad73077e"

pyproject.toml

+9 −1
Original line number Diff line number Diff line
@@ -10,7 +10,15 @@ authors = [] 
license = "LGPL"

readme = "README.md"

requires-python = ">=3.12"

dependencies = ["certifi (>=2026.1.4,<2026.2.0)", "urllib3 (>=2.6.3,<3.0.0)", "starlette (>=0.49.1,<1.0.0)", "uvicorn (>=0.36.0,<1.0.0)", "h11 (>=0.16.0,<1.0.0)"]

dependencies = [

    "idna (>=3.15,<4.0)",

    "urllib3 (>=2.7.0,<3.0.0)", 

    "certifi (>=2026.1.4,<2026.2.0)", 

    "urllib3 (>=2.6.3,<3.0.0)", 

    "starlette (>=0.49.1,<1.0.0)", 

    "uvicorn (>=0.36.0,<1.0.0)", 

    "h11 (>=0.16.0,<1.0.0)",

]



[project.scripts]

gcp-auth-provider = "gcp_auth_provider:run"