Skip to content

security(deps): patch pyasn1 and pypdf advisories - #337

Merged
brokermr810 merged 19 commits into
mainfrom
test
Oct 31, 2026
Merged

brokermr810 merged 19 commits into
mainfrom
test

Conversation

@brokermr810

Copy link
Copy Markdown
Collaborator

Summary

  • update pyasn1 from 0.6.4 to 0.6.5
  • update pypdf from 6.21.2 to 6.21.4 and raise the production requirement floor
  • resolve the newly published dependency advisories that blocked Security CI

Test plan

  • Production dependency lock guardrail passes
  • pip-audit reports no known vulnerabilities
  • Isolated import and PDF read/write smoke test passes
  • GitHub CI

API documentation

No route or schema changes.

tianhe added 19 commits October 27, 2026 01:39
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
# Conflicts:
#	README.md
#	README_CN.md
#	docs/screenshots/quantdinger-youtube-overview.png
Signed-off-by: TIANHE <TIANHE@GMAIL.COM>
@sonarqubecloud

Copy link
Copy Markdown

@brokermr810
brokermr810 merged commit c2af58c into main Oct 31, 2026
13 checks passed
@codecov

codecov Bot commented Oct 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants