From 24b4c3fd6555307722ccbe1f157434e460e037a5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 20 Sep 2026 09:12:34 +0000 Subject: [PATCH 1/2] build(deps): bump flask from 3.0.3 to 3.1.3 in /cicd Bumps [flask](https://github.com/pallets/flask) from 3.0.3 to 3.1.3. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/flask/compare/3.0.3...3.1.3) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- cicd/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cicd/requirements.txt b/cicd/requirements.txt index 7f6b3ea9..9392825a 100644 --- a/cicd/requirements.txt +++ b/cicd/requirements.txt @@ -1,4 +1,4 @@ -Flask==3.0.3 +Flask==3.1.3 Jinja2==3.1.6 mistune==3.3.3 psycopg2-binary==2.9.10 From 062b065ee83c983e21cbc1aacc2d62e2bc477adf Mon Sep 17 00:00:00 2001 From: Jeffrey Aven Date: Sun, 20 Sep 2026 19:36:35 +1000 Subject: [PATCH 2/2] ci: bump actions/download-artifact v4.1.2 -> v8.0.1 in scenario.yaml Resolves the remaining Dependabot alert for actions/download-artifact (arbitrary file write via artifact extraction, >= 4.0.0 < 4.1.3). build.yml was already moved to v8.0.1 in #781 and mcp-packaging.yml is already on v8, so this is the net change left over from #782, which would otherwise have pinned everything to the Node20-based v5. Supersedes #782. Co-Authored-By: Claude Fable 5.1 --- .github/workflows/scenario.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scenario.yaml b/.github/workflows/scenario.yaml index 12950877..c2cf252e 100644 --- a/.github/workflows/scenario.yaml +++ b/.github/workflows/scenario.yaml @@ -64,7 +64,7 @@ jobs: } >> "${GITHUB_ENV}" - name: Download Artifact - uses: actions/download-artifact@v4.1.2 + uses: actions/download-artifact@v8.0.1 with: name: stackql_linux_amd64 path: build