eterna2 / kest

91%

LAST BUILD ON BRANCH main

branch: main

CHANGE BRANCH

x

Reset

• main
• chore-deps-update
• chore/bump-moon-2.2.3-main
• chore/consolidated-dep-updates-20260411
• chore/dependabot-consolidation
• dependabot/cargo/libs/kest-core/python/serde_jcs-0.2.0
• dependabot/cargo/libs/kest-core/rust-v2/cargo-8056535635
• dependabot/github_actions/actions/checkout-6.0.2
• dependabot/github_actions/actions/download-artifact-8.0.1
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/github-actions-dependencies-937d73b4db
• dependabot/github_actions/github/codeql-action-4.35.1
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.0
• dependabot/npm_and_yarn/website/dompurify-3.4.0
• dependabot/npm_and_yarn/website/dompurify-3.4.1
• dependabot/npm_and_yarn/website/eslint-10.2.0
• dependabot/npm_and_yarn/website/eslint-config-next-16.2.3
• dependabot/npm_and_yarn/website/lucide-react-1.8.0
• dependabot/npm_and_yarn/website/mermaid-11.15.0
• dependabot/npm_and_yarn/website/next-16.2.3
• dependabot/npm_and_yarn/website/next-16.2.6
• dependabot/npm_and_yarn/website/npm-dependencies-ac3ec04918
• dependabot/npm_and_yarn/website/npm-dependencies-cff77d6b44
• dependabot/npm_and_yarn/website/npm_and_yarn-ad77747e51
• dependabot/npm_and_yarn/website/postcss-8.5.10
• dependabot/npm_and_yarn/website/react-19.2.5
• dependabot/npm_and_yarn/website/react-dom-19.2.5
• dependabot/npm_and_yarn/website/types/node-25.6.0
• dependabot/npm_and_yarn/website/typescript-6.0.2
• dependabot/npm_and_yarn/website/uuid-14.0.0
• dependabot/pip/libs/kest-core/python/aioboto3-gte-15.5.0
• dependabot/pip/libs/kest-core/python/hypothesis-gte-6.151.12
• dependabot/pip/libs/kest-core/python/moto-gte-5.1.22
• dependabot/pip/libs/kest-core/python/mypy-gte-1.20.0
• dependabot/pip/libs/kest-core/python/opentelemetry-api-gte-1.41.0
• dependabot/pip/libs/kest-core/python/opentelemetry-exporter-otlp-gte-1.41.0
• dependabot/pip/libs/kest-core/python/opentelemetry-sdk-gte-1.41.0
• dependabot/pip/libs/kest-core/python/pytest-cov-gte-7.1.0
• dependabot/pip/libs/kest-core/python/regopy-gte-1.4.0
• dependabot/pip/libs/kest-core/python/respx-gte-0.23.1
• dependabot/uv/libs/kest-core/python/uv-340da0885d
• dependabot/uv/libs/kest-core/python/uv-c30c77f42d
• dependabot/uv/libs/kest-core/python/uv-ced96d1c13
• docs/website-reorg
• feat/branding-and-seo
• feat/classification-taints
• feat/context-accessor-functions
• feat/issue-82-summarization-provider
• feat/opaque-handle-vault
• feat/output-validators
• feat/python-backend-and-security
• feat/resource-context
• feat/scorecard-action
• feat/scratchpad-first-branding
• feat/structured-validators
• feat/template-hydrate-engine
• feat/vault-backends-services
• feature/agent-auth-validators
• feature/sandbox-multi-backend
• fix-pypi-oidc
• fix-pypi-publish-action
• fix-release-ci
• fix/metadata-path-resolution
• fix/rust-v2-benchmarks-and-context
• fix/website-docs-pipeline
• patch-kest
• perf-optimize-rego-parsing-18130030827570908829
• perf-rust-gil-free-signing-6120426200825781025
• perf/bound-signing-thread-pool-3452011445409023685
• perf/passport-cache-optimization
• refactor/benchmark-and-lab-updates
• refactor/modularize-kest-core-python
• security/mitigation-apr-2026
• security/openssf-scorecard-hardening
• spec/v0.3.0-formalization
• v0.3.0

Build # 24935347407

Build Type

push

github

Committed by web-flow

Commit Message

security: mitigate multiple vulnerabilities in python and website dependencies (#103)

This commit updates several dependencies to address known security vulnerabilities:
- aiohttp: 3.13.3 -> 3.13.4 (Fixes #19-28)
- cryptography: 46.0.5 -> 46.0.7 (Fixes #17, #29)
- requests: 2.32.5 -> 2.33.0 (Fixes #16)
- Pygments: 2.19.2 -> 2.20.0 (Fixes #4, #18)
- PyJWT: 2.11.0 -> 2.12.1 (Fixes #1)
- postcss: 8.4.31 -> 8.5.10 (Fixes #40)
- uuid: 11.1.0 -> 14.0.0 (Fixes #39)

Verified with moon run kest-core-python:test and moon run website:build.

Coverage Stats

3061 of 3368 relevant lines covered (90.88%)

0.91 hits per line