From 175f1ee0d5bff0dadada6150e57eb66352f5cf31 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 May 2026 21:26:48 +0000 Subject: [PATCH 1/2] Bump pymdown-extensions from 10.21.2 to 10.21.3 Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.2 to 10.21.3. - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.2...10.21.3) --- updated-dependencies: - dependency-name: pymdown-extensions dependency-version: 10.21.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- pyproject.toml | 2 +- uv.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 3340fa0..9a56620 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -41,7 +41,7 @@ docs = [ "jinja2>=3.1.6", # Pinning version to address vulnerability GHSA-cpwx-vrp4-4pq7 "mkdocs>=1.6.0", "mkdocs-material>=9.5.15", - "pymdown-extensions>=10.21.2", # Pinning version for compatibility with pygments>=2.20.0 (CVE-2026-4539 fix) + "pymdown-extensions>=10.21.3", # Pinning version for compatibility with pygments>=2.20.0 (CVE-2026-4539 fix) "mkdocstrings>=0.24.1", "mkdocstrings-python>=1.10.0", "ipykernel>=6.29.5", diff --git a/uv.lock b/uv.lock index 92c8ad9..82f83a1 100644 --- a/uv.lock +++ b/uv.lock @@ -312,7 +312,7 @@ docs = [ { name = "mkdocs-material", specifier = ">=9.5.15" }, { name = "mkdocstrings", specifier = ">=0.24.1" }, { name = "mkdocstrings-python", specifier = ">=1.10.0" }, - { name = "pymdown-extensions", specifier = ">=10.21.2" }, + { name = "pymdown-extensions", specifier = ">=10.21.3" }, ] test = [ { name = "aiohttp", specifier = ">=3.13.3" }, @@ -3255,15 +3255,15 @@ wheels = [ [[package]] name = "pymdown-extensions" -version = "10.21.2" +version = "10.21.3" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "markdown" }, { name = "pyyaml" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/df/08/f1c908c581fd11913da4711ea7ba32c0eee40b0190000996bb863b0c9349/pymdown_extensions-10.21.2.tar.gz", hash = "sha256:c3f55a5b8a1d0edf6699e35dcbea71d978d34ff3fa79f3d807b8a5b3fa90fbdc", size = 853922, upload-time = "2026-03-29T15:01:55.233Z" } +sdist = { url = "https://files.pythonhosted.org/packages/9e/26/d1015444da4d952a1ca487a236b522eb979766f0295a0bd0c5fc089989a9/pymdown_extensions-10.21.3.tar.gz", hash = "sha256:72cfcf55f07aea0d4af2c4f11dd4e52466ddfb1bb819673146398e0bd3a77354", size = 854140, upload-time = "2026-05-13T12:57:32.267Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/f7/27/a2fc51a4a122dfd1015e921ae9d22fee3d20b0b8080d9a704578bf9deece/pymdown_extensions-10.21.2-py3-none-any.whl", hash = "sha256:5c0fd2a2bea14eb39af8ff284f1066d898ab2187d81b889b75d46d4348c01638", size = 268901, upload-time = "2026-03-29T15:01:53.244Z" }, + { url = "https://files.pythonhosted.org/packages/7e/85/545a951eecc270fcd688288c600017e2050a1aacb56c711d208586d3e470/pymdown_extensions-10.21.3-py3-none-any.whl", hash = "sha256:d7a5d08014fc571e80ca21dd6f854e31f94c489800350564d55d15b3c41e76b6", size = 269002, upload-time = "2026-05-13T12:57:30.296Z" }, ] [[package]] From 48c3cd22255f3ce207f38ff1f9d9fa63756cd7a5 Mon Sep 17 00:00:00 2001 From: "aieng-bot[bot]" Date: Wed, 20 May 2026 01:04:47 +0000 Subject: [PATCH 2/2] chore: bump idna to >=3.15 to fix CVE-2026-45409 Co-authored-by: aieng-bot --- pyproject.toml | 2 +- uv.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 9a56620..10015d1 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -15,7 +15,7 @@ dependencies = [ "wandb>=0.16.6", "accelerate>=0.29.3", "torch-geometric>=2.5.3", - "idna==3.7", + "idna>=3.15", # Pinning version to address vulnerability CVE-2026-45409 "scipy>=1.15.3", "scikit-learn>=1.6.1", "urllib3>=2.7.0", diff --git a/uv.lock b/uv.lock index 82f83a1..6c0ccc7 100644 --- a/uv.lock +++ b/uv.lock @@ -293,7 +293,7 @@ requires-dist = [ { name = "accelerate", specifier = ">=0.29.3" }, { name = "datasets", specifier = ">=2.19.0" }, { name = "filelock", specifier = ">=3.20.3" }, - { name = "idna", specifier = "==3.7" }, + { name = "idna", specifier = ">=3.15" }, { name = "scikit-learn", specifier = ">=1.6.1" }, { name = "scipy", specifier = ">=1.15.3" }, { name = "torch", specifier = ">=2.2.2" }, @@ -1260,11 +1260,11 @@ wheels = [ [[package]] name = "idna" -version = "3.7" +version = "3.15" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/21/ed/f86a79a07470cb07819390452f178b3bef1d375f2ec021ecfc709fc7cf07/idna-3.7.tar.gz", hash = "sha256:028ff3aadf0609c1fd278d8ea3089299412a7a8b9bd005dd08b9f8285bcb5cfc", size = 189575, upload-time = "2024-04-11T03:34:43.276Z" } +sdist = { url = "https://files.pythonhosted.org/packages/82/77/7b3966d0b9d1d31a36ddf1746926a11dface89a83409bf1483f0237aa758/idna-3.15.tar.gz", hash = "sha256:ca962446ea538f7092a95e057da437618e886f4d349216d2b1e294abfdb65fdc", size = 199245, upload-time = "2026-05-12T22:45:57.011Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/e5/3e/741d8c82801c347547f8a2a06aa57dbb1992be9e948df2ea0eda2c8b79e8/idna-3.7-py3-none-any.whl", hash = "sha256:82fee1fc78add43492d3a1898bfa6d8a904cc97d8427f683ed8e798d07761aa0", size = 66836, upload-time = "2024-04-11T03:34:41.447Z" }, + { url = "https://files.pythonhosted.org/packages/d2/23/408243171aa9aaba178d3e2559159c24c1171a641aa83b67bdd3394ead8e/idna-3.15-py3-none-any.whl", hash = "sha256:048adeaf8c2d788c40fee287673ccaa74c24ffd8dcf09ffa555a2fbb59f10ac8", size = 72340, upload-time = "2026-05-12T22:45:55.733Z" }, ] [[package]]