From 0a95cf72ea8b29ab7c76ff1130d148c747b779c3 Mon Sep 17 00:00:00 2001
From: IIIllllIlIlllII <brian.dasilvapontes@gmail.com>
Date: Thu, 13 Aug 2026 10:10:59 +0100
Subject: [PATCH] fix: update simpleeval and click to patch known
 vulnerabilities

- simpleeval ~=0.9.12 -> ~=1.0.5 (PYSEC-2026-132)
- click ~=8.1.6 -> ~=8.3.3 (PYSEC-2026-2132)

Verified API compatibility manually:
- simpleeval: simple_eval() with named args works as before
- click: imports and version check pass
---
 requirements/base.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements/base.txt b/requirements/base.txt
index a152b1de5..07c74f750 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -8,7 +8,7 @@ scipy~=1.10
 # yaml config
 omegaconf~=2.3
 # omegaconf arithmetic resolver
-simpleeval~=0.9.12
+simpleeval~=1.0.5
 # dynamic pyfunc reloading
 inotify-simple~=1.3.5
 
@@ -19,7 +19,7 @@ google-cloud-storage~=3.1.0
 tqdm~=4.64
 
 # ClientSDK JpegSource, PngSource
-click~=8.1.6
+click~=8.3.3
 python-magic~=0.4.27
 
 # pyds