diff --git a/.github/workflows/code_checks.yml b/.github/workflows/code_checks.yml index 0d677c0..5039805 100644 --- a/.github/workflows/code_checks.yml +++ b/.github/workflows/code_checks.yml @@ -32,7 +32,7 @@ jobs: - uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 + uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a with: # Install a specific version of uv. version: "0.7.20" diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c193bae..4cac1e2 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -45,7 +45,7 @@ jobs: uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@v7.1.4 + uses: astral-sh/setup-uv@v7.1.5 with: version: "0.7.20" enable-cache: true diff --git a/.github/workflows/integration_tests.yml b/.github/workflows/integration_tests.yml index 763b69c..4e20476 100644 --- a/.github/workflows/integration_tests.yml +++ b/.github/workflows/integration_tests.yml @@ -42,7 +42,7 @@ jobs: - uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 + uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a with: # Install a specific version of uv. version: "0.7.20" diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b681422..2911392 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 + uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a with: # Install a specific version of uv. version: "0.7.20" diff --git a/.github/workflows/unit_tests.yml b/.github/workflows/unit_tests.yml index d5b43f9..6234942 100644 --- a/.github/workflows/unit_tests.yml +++ b/.github/workflows/unit_tests.yml @@ -42,7 +42,7 @@ jobs: - uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 + uses: astral-sh/setup-uv@ed21f2f24f8dd64503750218de024bcf64c7250a with: # Install a specific version of uv. version: "0.7.20" diff --git a/pyproject.toml b/pyproject.toml index 8c07911..31963a0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -18,6 +18,7 @@ dependencies = [ "pyarrow>=18.1.0", # Required for Parquet support "matplotlib", "fonttools>=4.60.2", # Pinning version to address vulnerability GHSA-768j-98cg-p3fv + "urllib3>=2.6.0", # Pinning version to address vulnerabilities GHSA-gm62-xv2j-4w53 and GHSA-2xpw-w6gg-jr37 "networkx", "geopy", "scikit-learn==1.7.1", diff --git a/uv.lock b/uv.lock index 25845e4..6c598bc 100644 --- a/uv.lock +++ b/uv.lock @@ -890,6 +890,7 @@ dependencies = [ { name = "torch-geometric" }, { name = "typer" }, { name = "tzdata" }, + { name = "urllib3" }, { name = "uvicorn", extra = ["standard"] }, ] @@ -946,6 +947,7 @@ requires-dist = [ { name = "torch-geometric" }, { name = "typer", specifier = ">=0.20.0" }, { name = "tzdata", specifier = ">=2024.2" }, + { name = "urllib3", specifier = ">=2.6.0" }, { name = "uvicorn", extras = ["standard"], specifier = ">=0.34.0" }, ] @@ -3712,11 +3714,11 @@ wheels = [ [[package]] name = "urllib3" -version = "2.5.0" +version = "2.6.1" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/15/22/9ee70a2574a4f4599c47dd506532914ce044817c7752a79b6a51286319bc/urllib3-2.5.0.tar.gz", hash = "sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760", size = 393185 } +sdist = { url = "https://files.pythonhosted.org/packages/5e/1d/0f3a93cca1ac5e8287842ed4eebbd0f7a991315089b1a0b01c7788aa7b63/urllib3-2.6.1.tar.gz", hash = "sha256:5379eb6e1aba4088bae84f8242960017ec8d8e3decf30480b3a1abdaa9671a3f", size = 432678 } wheels = [ - { url = "https://files.pythonhosted.org/packages/a7/c2/fe1e52489ae3122415c51f387e221dd0773709bad6c6cdaa599e8a2c5185/urllib3-2.5.0-py3-none-any.whl", hash = "sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc", size = 129795 }, + { url = "https://files.pythonhosted.org/packages/bc/56/190ceb8cb10511b730b564fb1e0293fa468363dbad26145c34928a60cb0c/urllib3-2.6.1-py3-none-any.whl", hash = "sha256:e67d06fe947c36a7ca39f4994b08d73922d40e6cca949907be05efa6fd75110b", size = 131138 }, ] [[package]]