Skip to content

Update dependencies to fix vulnerabilities (2026-11-02) - #413

Merged
tkilias merged 1 commit into
mainfrom
dependency-update/2026-11-02
Nov 4, 2026
Merged

tkilias merged 1 commit into
mainfrom
dependency-update/2026-11-02

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Automated dependency update for poetry.lock.
This PR was created by the workflow dependency-update.yml

Remaining vulnerable dependencies after the automated update:

[
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112906",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112940",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112914",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112913",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112937",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112907",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112938",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112910",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112934",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112909",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112911",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112939",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112915",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112935",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112912",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112908",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "filelock",
    "version": "4.1.0",
    "vulnerability": "CVE-2026-112941",
    "fix_versions": [
      "4.2.1"
    ]
  },
  {
    "name": "tornado",
    "version": "6.5.10",
    "vulnerability": "CVE-2026-116577",
    "fix_versions": [
      "6.6"
    ]
  },
  {
    "name": "tornado",
    "version": "6.5.10",
    "vulnerability": "CVE-2026-115927",
    "fix_versions": [
      "6.6"
    ]
  },
  {
    "name": "tornado",
    "version": "6.5.10",
    "vulnerability": "CVE-2026-116578",
    "fix_versions": [
      "6.6"
    ]
  }
]

@github-actions github-actions Bot added the security Security related change label Nov 2, 2026
@github-actions
github-actions Bot deployed to manual-approval November 4, 2026 14:43 Active
@tkilias
tkilias enabled auto-merge (squash) November 4, 2026 14:48
@sonarqubecloud

sonarqubecloud Bot commented Nov 4, 2026

Copy link
Copy Markdown

@tkilias
tkilias disabled auto-merge November 4, 2026 17:38
@tkilias
tkilias merged commit c2bb493 into main Nov 4, 2026
226 of 228 checks passed
@tkilias
tkilias deleted the dependency-update/2026-11-02 branch November 4, 2026 17:38

This branch was successfully deployed

1 active deployment
manual-approval — 9fb68297 Deployed Nov 4, 2026 by github-actions[bot] via Merge Gate / Approve Running Slow Tests? #433
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Security related change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant