From 6c2d72f5593853020bda13ab3a951b061a8061d3 Mon Sep 17 00:00:00 2001 From: Ryan Adams Date: Thu, 1 Oct 2026 08:47:37 -0600 Subject: [PATCH] fix(deps): raise Mako and requests floors past known advisories Mako was held at ~=1.1.3 and requests pinned to 2.31.0, both below releases that fix published security advisories. Raise the floors to Mako>=1.3.10 and requests>=2.32.4. The full test suite passes against the new versions. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_016KAfcDUSerQCCWwBM9BxAo --- CHANGELOG.md | 1 + src/python/pyproject.toml | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f308c260..6121e9fe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - **SCEPTRE App**: Test suite (128 tests), two of them characterization tests over both stages and all 310 infrastructure/device-type/protocol combinations, plus `apps/sceptre/README.md`. ### Changed +- **Build System**: `Mako>=1.3.10`, `requests>=2.32.4` (security advisories). - **SCEPTRE App**: Register numbering state is per `FieldDeviceConfig` instead of class-level mutable state on `Register`; numbering is no longer order-dependent across configs and the test suite runs safely in parallel. Output is unchanged. - **SCEPTRE App**: `configure()` and `pre_start()` are stage classes, `ConfigureStage` and `PreStart`, sharing pre-start state through `PreStartState`. - **SCEPTRE App**: The device-type table is `configs/infrastructures.yaml`; adding a device type needs no code change. diff --git a/src/python/pyproject.toml b/src/python/pyproject.toml index a027659e..8a3de7c7 100644 --- a/src/python/pyproject.toml +++ b/src/python/pyproject.toml @@ -26,14 +26,14 @@ dependencies = [ "elasticsearch<9", "kafka-python~=2.2.13", "lxml>=4.9.2", - "Mako~=1.1.3", + "Mako>=1.3.10", "minimega", "loguru>=0.7.2", "pydantic>=2.0.0", "python-box~=7.2.0", "python-dateutil~=2.8.2", "pyyaml~=6.0.2", - "requests==2.31.0", + "requests>=2.32.4", "rich~=14.2.0", "paramiko>=4.0.0,<5", ]