Merge pull request #157 from IBM/security-updates

Security updates

Author: crivetimihai

.dockerignore

@@ -1,3 +1,6 @@
+Dockerfile
+Dockerfile.*
+Containerfile.*
 .devcontainer
 .github
 docker-compose.yml

docs/requirements.txt

@@ -2,11 +2,11 @@ actdiag>=3.0.0
 Babel>=2.17.0
 beautifulsoup4>=4.13.4
 blockdiag>=3.0.0
-bracex>=2.5.post1
+bracex>=2.6
 Brotli>=1.1.0
 cairocffi>=1.7.1
 CairoSVG>=2.8.2
-certifi>=2025.4.26
+certifi>=2025.6.15
 cffi>=1.17.1
 charset-normalizer>=3.4.2
 click>=8.2.1
@@ -16,7 +16,7 @@ cssselect2>=0.8.0
 defusedxml>=0.7.1
 EditorConfig>=0.17.1
 flatten-json>=0.1.14
-fonttools>=4.58.2
+fonttools>=4.58.4
 funcparserlib>=1.0.1
 ghp-import>=2.1.0
 gitdb>=4.0.12
@@ -29,7 +29,7 @@ Jinja2>=3.1.6
 jsbeautifier>=1.15.4
 jsmin>=3.0.1
 libsass>=0.23.0
-Markdown>=3.8
+Markdown>=3.8.2
 markdown-blockdiag>=0.8.0
 markdown-include>=0.8.1
 MarkupSafe>=3.0.2
@@ -41,7 +41,7 @@ mkdocs-enumerate-headings-plugin>=0.6.2
 mkdocs-git-authors-plugin>=0.10.0
 mkdocs-git-revision-date-localized-plugin>=1.4.7
 mkdocs-glightbox>=0.4.0
-mkdocs-include-markdown-plugin>=7.1.5
+mkdocs-include-markdown-plugin>=7.1.6
 mkdocs-material>=9.6.14
 mkdocs-material-extensions>=1.3.1
 mkdocs-mermaid-plugin>=0.1.1
@@ -53,7 +53,7 @@ mkdocs-rss-plugin>=1.17.3
 mkdocs-table-reader-plugin>=3.1.0
 mkdocs-with-pdf>=0.9.3
 natsort>=8.4.0
-numpy>=2.3.0
+numpy>=2.3.1
 nwdiag>=3.0.0
 packaging>=25.0
 paginate>=0.5.7
@@ -63,8 +63,8 @@ pillow>=11.2.1
 platformdirs>=4.3.8
 pycparser>=2.22
 pydyf>=0.11.0
-Pygments>=2.19.1
-pymdown-extensions>=10.15
+Pygments>=2.19.2
+pymdown-extensions>=10.16
 pyparsing>=3.2.3
 pyphen>=0.17.2
 python-dateutil>=2.9.0.post0
@@ -80,9 +80,9 @@ soupsieve>=2.7
 tabulate>=0.9.0
 tinycss2>=1.4.0
 tzdata>=2025.2
-urllib3>=2.4.0
+urllib3>=2.5.0
 watchdog>=6.0.0
-wcmatch>=10.0
+wcmatch>=10.1
 weasyprint>=65.1
 webcolors>=24.11.1
 webencodings>=0.5.1

pyproject.toml

@@ -46,19 +46,19 @@ maintainers = [
 # ----------------------------------------------------------------
 dependencies = [
     "cryptography>=45.0.4",
-    "fastapi>=0.115.12",
+    "fastapi>=0.115.13",
     "filelock>=3.18.0",
     "gunicorn>=23.0.0",
     "httpx>=0.28.1",
     "jinja2>=3.1.6",
-    "jq>=1.8.0",
+    "jq>=1.9.1",
     "jsonpath-ng>=1.7.0",
     "jsonschema>=4.24.0",
     "mcp>=1.9.4",
     "parse>=1.20.2",
     "psutil>=7.0.0",
-    "pydantic>=2.11.5",
-    "pydantic-settings>=2.9.1",
+    "pydantic>=2.11.7",
+    "pydantic-settings>=2.10.0",
     "pyjwt>=2.10.1",
     "sqlalchemy>=2.0.41",
     "sse-starlette>=2.3.6",
@@ -95,21 +95,21 @@ asyncpg = [
 dev = [
     "argparse-manpage>=4.6",
     "autoflake>=2.3.1",
-    "bandit>=1.8.3",
+    "bandit>=1.8.5",
     "black>=25.1.0",
     "bump2version>=1.0.1",
     "check-manifest>=0.50",
     "code2flow>=2.5.1",
     "cookiecutter>=2.6.0",
-    "coverage>=7.9.0",
+    "coverage>=7.9.1",
     "coverage-badge>=1.1.2",
     "darglint>=1.8.1",
     "fawltydeps>=0.20.0",
-    "flake8>=7.2.0",
+    "flake8>=7.3.0",
     "gprof2dot>=2025.4.14",
     "importchecker>=3.0",
     "isort>=6.0.1",
-    "mypy>=1.16.0",
+    "mypy>=1.16.1",
     "pexpect>=4.9.0",
     "pip-licenses>=5.0.0",
     "pip_audit>=2.9.0",
@@ -121,7 +121,7 @@ dev = [
     "pyright>=1.1.402",
     "pyroma>=4.2",
     "pyspelling>=2.10",
-    "pytest>=8.4.0",
+    "pytest>=8.4.1",
     "pytest-asyncio>=1.0.0",
     "pytest-cov>=6.2.1",
     "pytest-examples>=0.0.18",
@@ -130,25 +130,25 @@ dev = [
     "pytest-xdist>=3.7.0",
     "pytype>=2024.10.11",
     "radon>=6.0.1",
-    "ruff>=0.11.13",
+    "ruff>=0.12.0",
     "settings-doc>=4.3.2",
     "snakeviz>=2.2.2",
     "tomlcheck>=0.2.3",
-    "twine>=6.1.0",
-    "ty>=0.0.1a9",
-    "types-tabulate>=0.9.0.20241207",
     "tox>=4.27.0",
     "tox-uv>=1.26.0",
+    "twine>=6.1.0",
+    "ty>=0.0.1a11",
+    "types-tabulate>=0.9.0.20241207",
     "uv>=0.7.13",
     "yamllint>=1.37.1",
 ]
 
 # Convenience meta-extras
 all = [
-    "mcp-contextforge-gateway[redis]",
+    "mcp-contextforge-gateway[redis]>=0.1.1",
 ]
 dev-all = [
-    "mcp-contextforge-gateway[redis,dev]",
+    "mcp-contextforge-gateway[redis,dev]>=0.1.1",
 ]
 
 # --------------------------------------------------------------------