From f9ca23f61b346a08a28f9746eeb1326655f929f5 Mon Sep 17 00:00:00 2001 From: dizhaky Date: Sun, 9 Aug 2026 13:33:58 +0000 Subject: [PATCH] fix(deps): resolve August Dependabot alerts --- pyproject.toml | 2 +- uv.lock | 13 +++++++------ website/.npmrc | 2 ++ website/package-lock.json | 12 ++++++------ website/package.json | 5 +++-- 5 files changed, 19 insertions(+), 15 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 4b2736dfbc982..a3a7dd979e3bb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -371,7 +371,7 @@ override-dependencies = [ "pynacl>=1.6,<1.7", ] exclude-newer = "14 days" -exclude-newer-package = { vercel = false, nemo-relay = false, huggingface_hub = false, cryptography = false, aiohttp = false } +exclude-newer-package = { vercel = false, nemo-relay = false, huggingface_hub = false, cryptography = false, aiohttp = false, h2 = false } [tool.setuptools] # Top-level single-file modules (not packages). Without this, uv2nix's diff --git a/uv.lock b/uv.lock index 66cf9d2298e6f..360eb8cdd44b2 100644 --- a/uv.lock +++ b/uv.lock @@ -17,6 +17,7 @@ cryptography = false aiohttp = false nemo-relay = false huggingface-hub = false +h2 = false [manifest] overrides = [{ name = "pynacl", specifier = ">=1.6,<1.7" }] @@ -1537,15 +1538,15 @@ wheels = [ [[package]] name = "h2" -version = "4.3.0" +version = "4.4.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "hpack" }, { name = "hyperframe" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/1d/17/afa56379f94ad0fe8defd37d6eb3f89a25404ffc71d4d848893d270325fc/h2-4.3.0.tar.gz", hash = "sha256:6c59efe4323fa18b47a632221a1888bd7fde6249819beda254aeca909f221bf1", size = 2152026, upload-time = "2025-08-23T18:12:19.778Z" } +sdist = { url = "https://files.pythonhosted.org/packages/e7/85/7c366e69d84c17bb778fe41419e1fbcce3033d5b7ce29bbffff0a98b859f/h2-4.4.1.tar.gz", hash = "sha256:4e866ffb1a869ae14dd9b5e6beb5c24a13da0495ad72b65925ded182521c1516", size = 2157281, upload-time = "2026-08-03T11:45:09.509Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/69/b2/119f6e6dcbd96f9069ce9a2665e0146588dc9f88f29549711853645e736a/h2-4.3.0-py3-none-any.whl", hash = "sha256:c438f029a25f7945c69e0ccf0fb951dc3f73a5f6412981daee861431b70e2bdd", size = 61779, upload-time = "2025-08-23T18:12:17.779Z" }, + { url = "https://files.pythonhosted.org/packages/7e/22/e85faf23bd72a92d1921e37d674ca56eb298a3c8be31fdecef0ff2b3aaac/h2-4.4.1-py3-none-any.whl", hash = "sha256:0e25f1462b23c9cb82d9eb02e28bc706dac2a68cb457c6a0d74d63c8a2a5d0e6", size = 62636, upload-time = "2026-08-03T11:44:59.164Z" }, ] [[package]] @@ -1990,11 +1991,11 @@ wheels = [ [[package]] name = "hpack" -version = "4.1.0" +version = "4.2.0" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/2c/48/71de9ed269fdae9c8057e5a4c0aa7402e8bb16f2c6e90b3aa53327b113f8/hpack-4.1.0.tar.gz", hash = "sha256:ec5eca154f7056aa06f196a557655c5b009b382873ac8d1e66e79e87535f1dca", size = 51276, upload-time = "2025-01-22T21:44:58.347Z" } +sdist = { url = "https://files.pythonhosted.org/packages/26/5b/fcabf6028144a8723726318b07a32c2f3314acdff6265743cf08a344b18e/hpack-4.2.0.tar.gz", hash = "sha256:0895cfa3b5531fc65fe439c05eb65144f123bf7a394fcaa56aa423548d8e45c0", size = 51300, upload-time = "2026-06-23T18:34:46.667Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/07/c6/80c95b1b2b94682a72cbdbfb85b81ae2daffa4291fbfa1b1464502ede10d/hpack-4.1.0-py3-none-any.whl", hash = "sha256:157ac792668d995c657d93111f46b4535ed114f0c9c8d672271bbec7eae1b496", size = 34357, upload-time = "2025-01-22T21:44:56.92Z" }, + { url = "https://files.pythonhosted.org/packages/71/b4/4a9fcfb2aef6ba44d9073ecd301443aa00b3dac95de5619f2a7de7ec8a91/hpack-4.2.0-py3-none-any.whl", hash = "sha256:858ac0b02280fa582b5080d68db0899c62a80375e0e5413a74970c5e518b6986", size = 34246, upload-time = "2026-06-23T18:34:45.472Z" }, ] [[package]] diff --git a/website/.npmrc b/website/.npmrc index 7d5dbfad55bc3..ce30a1349e974 100644 --- a/website/.npmrc +++ b/website/.npmrc @@ -15,3 +15,5 @@ min-release-age-exclude[]=brace-expansion min-release-age-exclude[]=postcss min-release-age-exclude[]=undici min-release-age-exclude[]=@opentelemetry/* +min-release-age-exclude[]=nanoid +min-release-age-exclude[]=js-yaml diff --git a/website/package-lock.json b/website/package-lock.json index d2ba2023d6970..ab74025adea5a 100644 --- a/website/package-lock.json +++ b/website/package-lock.json @@ -11666,9 +11666,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "funding": [ { "type": "github", @@ -14574,9 +14574,9 @@ } }, "node_modules/nanoid": { - "version": "3.3.16", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz", - "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==", + "version": "3.3.17", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz", + "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==", "funding": [ { "type": "github", diff --git a/website/package.json b/website/package.json index 3682ac1bdec03..f03974c658f5b 100644 --- a/website/package.json +++ b/website/package.json @@ -36,7 +36,7 @@ "typescript": "6.0.3" }, "overrides": { - "js-yaml": "4.3.0", + "js-yaml": "4.3.1", "brace-expansion": "1.1.18", "fast-uri": "3.1.5", "serialize-javascript": "7.0.5", @@ -70,7 +70,8 @@ "@docusaurus/utils-common": "3.10.2", "@docusaurus/utils-validation": "3.10.2", "postcss": "8.5.23", - "undici": "7.29.0" + "undici": "7.29.0", + "nanoid": "3.3.17" }, "browserslist": { "production": [