From eeda61bd20c4352fe83efa0beb3a09e1ddbeb92f Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 14 Oct 2025 20:32:03 +0000 Subject: [PATCH 1/2] chore(deps): update dependency pydantic to v2.12.2 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index ca7bc07..162f328 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ Flask==3.1.2 -pydantic==2.12.1 +pydantic==2.12.2 kombu==5.5.4 pymongo==4.15.3 PyYAML==6.0.* From a4f9d4c79f1b5a19710b37ea824ab16a8770e654 Mon Sep 17 00:00:00 2001 From: Ali Ugur Date: Fri, 17 Oct 2025 13:19:27 +0300 Subject: [PATCH 2/2] Chore: Remove unused trivy ignores --- .trivyignore | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/.trivyignore b/.trivyignore index 9640c6d..6fc9396 100644 --- a/.trivyignore +++ b/.trivyignore @@ -1,13 +1,7 @@ -# pebble, false positive https://github.com/canonical/pebble/issues/498 -CVE-2024-34156 # Vulnerability in golang.org/x/crypto introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod CVE-2024-45337 CVE-2025-22869 -# Vulnerability in golang.org/x/net introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod -CVE-2024-45338 -# Vulnerability in crypto/x509 introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod -CVE-2025-22874 # Vulnerability in golang.org/x/oauth2/jws introduced by statsd-exporter. CVE-2025-22868 # Vulnerability in go stdlib introduced by statsd-exporter. -CVE-2025-47907 \ No newline at end of file +CVE-2025-47907