Skip to content

deps: update Python dependencies and Socket.IO client - #252

Merged
bifrost0x merged 3 commits into
mainfrom
dependabot/pip/python-minor-and-patch-668975084a
Oct 5, 2026
Merged

bifrost0x merged 3 commits into
mainfrom
dependabot/pip/python-minor-and-patch-668975084a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Consolidates the Python updates from #252 and the Socket.IO update from #253.

  • Update cryptography to 50.0.2, python-dotenv to 1.2.4, WebAuthn to 3.0.1, Werkzeug to 3.1.9, graphifyy to 0.9.73 and socket.io-client to 4.8.4.
  • Regenerate all Python locks with uv 0.12.3, restoring universal platform markers and hash enforcement, and remove duplicated Graphify dependency hashes.
  • Refresh the Graphify version assertions and vendored Socket.IO bundle. Socket.IO 4.8.4 already includes the attachment bounds, so remove the obsolete local bundle rewrite while retaining both security regression tests.

Validation: 62 dependency/supply-chain tests and 222 focused application/vendor tests passed on both Python 3.11 and 3.14; 677 JavaScript tests, JavaScript lint, vendor integrity and the dependency-lock check passed. Both npm audits reported zero vulnerabilities. Graphify update completed. Hosted CI passed on head 98afd23cf7d8bbd3973ed8716bdc90d131237e32: all test gates and AMD64/ARM64 image security. The full Python suite passed 3,385 tests with 2 skipped; both browser shards, Python 3.11 compatibility, Redis 7/8, SSH/SMB integration, container runtime checks and CodeQL passed.

Local container and deployment acceptance was not run because Docker is unavailable. Release acceptance remains tracked in #248.

Bumps the python-minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [graphifyy](https://github.com/Graphify-Labs/graphify) | `0.9.71` | `0.9.73` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [webauthn](https://github.com/duo-labs/py_webauthn) | `3.0.0` | `3.0.1` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.8` | `3.1.9` |


Updates `graphifyy` from 0.9.71 to 0.9.73
- [Release notes](https://github.com/Graphify-Labs/graphify/releases)
- [Changelog](https://github.com/Graphify-Labs/graphify/blob/v8/CHANGELOG.md)
- [Commits](Graphify-Labs/graphify@v0.9.71...v0.9.73)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

Updates `webauthn` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/duo-labs/py_webauthn/releases)
- [Changelog](https://github.com/duo-labs/py_webauthn/blob/master/CHANGELOG.md)
- [Commits](duo-labs/py_webauthn@v3.0.0...v3.0.1)

Updates `werkzeug` from 3.1.8 to 3.1.9
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.8...3.1.9)

---
updated-dependencies:
- dependency-name: graphifyy
  dependency-version: 0.9.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: webauthn
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: werkzeug
  dependency-version: 3.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 5, 2026
dependabot Bot and others added 2 commits October 5, 2026 08:34
Bumps the npm-minor-and-patch group with 1 update: [socket.io-client](https://github.com/socketio/socket.io).


Updates `socket.io-client` from 4.8.3 to 4.8.4
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4)

---
updated-dependencies:
- dependency-name: socket.io-client
  dependency-version: 4.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@bifrost0x bifrost0x changed the title deps(python): bump the python-minor-and-patch group with 5 updates deps: update Python dependencies and Socket.IO client Oct 5, 2026
@bifrost0x
bifrost0x merged commit 07f4726 into main Oct 5, 2026
26 checks passed
@bifrost0x
bifrost0x deleted the dependabot/pip/python-minor-and-patch-668975084a branch October 5, 2026 06:57
@bifrost0x bifrost0x added this to the v2.5.0 milestone Oct 5, 2026 — with ChatGPT Codex Connector
@bifrost0x bifrost0x mentioned this pull request Oct 5, 2026
7 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant