Skip to content

Commit 6fbd9f6

Browse files
sspickleclaude
andcommitted
security: upgrade Authlib to 1.6.7 (CVE-2026-28802), bump Python to 3.12
- Update Authlib from 1.2.0 to 1.6.7 (critical security fix for JWT alg:none bypass) - Update cryptography from 41.0.6 to 46.0.7 - Update google-auth from 2.18.0 to 2.40.3 - Update google-cloud-datastore from 2.15.2 to 2.23.0 - Update google-cloud-ndb from 2.1.1 to 2.4.0 - Update Jinja2 from 3.1.2 to 3.1.6 - Update python-dotenv from 1.0.0 to 1.2.2 - Update requests from 2.31.0 to 2.33.0 - Update cffi to >=2.0.0 (dependency fix for cryptography 46.0.7) - Update grpcio and grpcio-status to 1.60.0 (Python 3.12 compatibility) - Update Dockerfile FROM python:3.10-slim to python:3.12-slim Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 87aefc1 commit 6fbd9f6

2 files changed

Lines changed: 12 additions & 12 deletions

File tree

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11

22
# Use the official lightweight Python image.
33
# https://hub.docker.com/_/python
4-
FROM python:3.10-slim
4+
FROM python:3.12-slim
55

66
# Allow statements and log messages to immediately appear in the Knative logs
77
ENV PYTHONUNBUFFERED=True

requirements.txt

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,35 @@
11
async-timeout==4.0.2
2-
Authlib==1.2.0
2+
Authlib==1.6.7
33
blinker==1.6.2
44
bunnet==1.1.0
55
cachetools==5.3.0
66
certifi==2023.7.22
7-
cffi==1.15.1
7+
cffi==2.0.0
88
charset-normalizer==3.1.0
99
click==8.1.3
10-
cryptography==41.0.6
10+
cryptography==46.0.7
1111
dnspython==2.3.0
1212
exceptiongroup==1.1.1
1313
Flask==2.3.2
1414
Flask-Cors==3.0.10
1515
google-api-core==2.11.0
1616
google-api-python-client==2.86.0
17-
google-auth==2.18.0
17+
google-auth==2.40.3
1818
google-auth-httplib2==0.1.0
1919
google-cloud-core==2.3.2
20-
google-cloud-datastore==2.15.2
21-
google-cloud-ndb==2.1.1
20+
google-cloud-datastore==2.23.0
21+
google-cloud-ndb==2.4.0
2222
google-cloud-secret-manager==2.16.1
2323
googleapis-common-protos==1.59.0
2424
grpc-google-iam-v1==0.12.6
25-
grpcio==1.54.3
26-
grpcio-status==1.54.2
25+
grpcio==1.60.0
26+
grpcio-status==1.60.0
2727
gunicorn==20.1.0
2828
httplib2==0.22.0
2929
idna==3.4
3030
iniconfig==2.0.0
3131
itsdangerous==2.1.2
32-
Jinja2==3.1.2
32+
Jinja2==3.1.6
3333
lazy-model==0.0.5
3434
MarkupSafe==2.1.2
3535
packaging==23.1
@@ -44,10 +44,10 @@ pymemcache==4.0.0
4444
pymongo==4.4.0
4545
pyparsing==3.0.9
4646
pytest==7.4.0
47-
python-dotenv==1.0.0
47+
python-dotenv==1.2.2
4848
pytz==2023.3
4949
redis==4.5.5
50-
requests==2.31.0
50+
requests==2.33.0
5151
rsa==4.9
5252
six==1.16.0
5353
toml==0.10.2

0 commit comments

Comments
 (0)