Bump safe dependencies (combined Dependabot updates)
Some checks are pending
CodeQL / Analyze (push) Waiting to run
Controller Tests / controller-tests (push) Waiting to run
Jest Tests / jest-tests (push) Waiting to run

Combines all Dependabot bumps verified safe to merge (green CI, or only
the known-flaky test_download_channel / cypress E2E flake failing).

controller/requirements.txt:
  - fastapi >=0.136.3 -> >=0.138.2   (#507, #516)
  - uvicorn[standard] >=0.48.0 -> >=0.49.0   (#517, #510)
  - aiohttp 3.14.0 -> 3.14.1   (#482, #514)
  - pytest >=9.0.3 -> >=9.1.1   (#515)

requirements.txt:
  - aiohttp 3.14.0 -> 3.14.1   (#481)
  - cryptography 46.0.7 -> 48.0.1   (#485)
  - py7zr >=1.1.0 -> >=1.1.3   (#508)

app/ (package.json + package-lock.json):
  - @types/node ^25.9.1 -> ^26.0.1 (undici-types ~8.3.0)   (#509)
  - websocket-driver 0.7.4 -> 0.7.5   (#539)

Excluded: #505 (cypress 13->15 major, needs review), #476 (lockfile
conflict, needs rebase), #512 & #506 (blocked on SQLAlchemy 2.0 migration).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Roland 2026-07-15 20:07:21 -06:00
parent ef6d470f52
commit 860172e183
No known key found for this signature in database
GPG key ID: 1BA620CE6C9A4680
4 changed files with 36 additions and 110 deletions

View file

@ -2,8 +2,8 @@
# Separate from main WROLPi API to keep venvs independent
# Web framework
fastapi>=0.136.3
uvicorn[standard]>=0.48.0
fastapi>=0.138.2
uvicorn[standard]>=0.49.0
pydantic>=2.13.4
# Templates
@ -20,10 +20,10 @@ pyyaml>=6.0.3
# Docker management (optional, for Docker mode)
docker>=7.1.0
aiohttp==3.14.0
aiohttp==3.14.1
# Testing
pytest>=9.0.3
pytest>=9.1.1
pytest-asyncio>=1.4.0
pytest-xdist>=3.8.0
httpx>=0.28.1