From 258dcbffaec8e5867b5aae157d81c253d849d3ba Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Dec 2025 15:46:57 +0000 Subject: [PATCH] chore(deps)(deps): Bump websockets from 12.0 to 15.0.1 Bumps [websockets](https://github.com/python-websockets/websockets) from 12.0 to 15.0.1. - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](https://github.com/python-websockets/websockets/compare/12.0...15.0.1) --- updated-dependencies: - dependency-name: websockets dependency-version: 15.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- client/requirements.txt | 2 +- server/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/client/requirements.txt b/client/requirements.txt index fc9e0cd..1dd2fd2 100644 --- a/client/requirements.txt +++ b/client/requirements.txt @@ -7,7 +7,7 @@ pyqtgraph==0.13.3 # Networking requests==2.32.4 # Security: Fixes CVE-2024-47081 (netrc leak), CVE-2024-35195 (verify=False persistence) -websockets==12.0 +websockets==15.0.1 aiohttp==3.12.14 # Security: Fixes CVE-2024-23334 (directory traversal), CVE-2024-30251 (DoS), CVE-2024-52304 (request smuggling), CVE-2024-27306 (XSS), CVE-2024-23829 (HTTP parser), CVE-2025-53643 (smuggling) # SSH and Deployment diff --git a/server/requirements.txt b/server/requirements.txt index 6bb750f..93f6dab 100644 --- a/server/requirements.txt +++ b/server/requirements.txt @@ -1,7 +1,7 @@ # Web Framework fastapi>=0.115.0 # Security: Fixes PYSEC-2024-38 (ReDoS), upgrades starlette to fix GHSA-f96h-pmfr-66vw, GHSA-2c2j-9gv5-cj73 uvicorn[standard]==0.27.0 -websockets==12.0 +websockets==15.0.1 python-multipart>=0.0.18 # Required for FastAPI file uploads (Form/File parameters). Security: Fixes GHSA-2jv5-9r88-3w3p (ReDoS), GHSA-59g5-xgcq-4qw3 (DoS) # Equipment Communication