Skip to content

Fix Dependabot security alerts - #4

Merged
jmbejara merged 1 commit into
mainfrom
fix/dependabot-security-updates
Apr 1, 2026
Merged

Fix Dependabot security alerts#4
jmbejara merged 1 commit into
mainfrom
fix/dependabot-security-updates

Conversation

@jmbejara

@jmbejara jmbejara commented Apr 1, 2026

Copy link
Copy Markdown
Owner

Summary

  • Bump vulnerable dependencies to resolve all 3 open Dependabot security alerts

Version bumps

  • requests 2.32.3 → 2.33.0
  • black 24.8.0 → 26.3.1

Updated in both requirements.txt and environment.yml.

Test plan

  • Verify CI passes with updated dependencies
  • Confirm Dependabot alerts are resolved after merge

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@jmbejara
jmbejara merged commit 1d58534 into main Apr 1, 2026
2 checks passed
@jmbejara
jmbejara deleted the fix/dependabot-security-updates branch April 1, 2026 13:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant