Skip to content

Commit 49ac8e7

Browse files
yumibaggeclaude
andcommitted
fix: update dependencies to resolve security vulnerabilities
- Update mcp from 1.19.0 to 1.23.3 (fixes GHSA-9h52-p55h-vw2f) - Update urllib3 from 2.5.0 to 2.6.1 (fixes GHSA-gm62-xv2j-4w53, GHSA-2xpw-w6gg-jr37) - Update uv from 0.9.5 to 0.9.6 in CI workflow (fixes GHSA-pqhf-p39g-3x64) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
1 parent 82f5d32 commit 49ac8e7

File tree

3 files changed

+32
-7
lines changed

3 files changed

+32
-7
lines changed

.github/workflows/Build.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
- uses: astral-sh/setup-uv@v7
3232
with:
33-
version: "0.9.5"
33+
version: "0.9.6"
3434

3535
- name: Install Project Dependencies
3636
run: uv sync --locked --all-extras --all-groups

pyproject.toml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,9 @@ readme = "README.md"
66
requires-python = ">=3.14"
77
dependencies = [
88
"fastmcp>=2.13.0.2",
9+
"mcp>=1.23.0", # security fix for GHSA-9h52-p55h-vw2f
910
"starlette>=0.49.1", # the default version in fastmcp is vulnerable to https://github.com/advisories/GHSA-7f5h-v6xp-fcq8
11+
"urllib3>=2.6.0", # security fix for GHSA-gm62-xv2j-4w53 and GHSA-2xpw-w6gg-jr37
1012
]
1113

1214
[dependency-groups]

uv.lock

Lines changed: 29 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)