fix: dependabot high and critical alert

src/ContentProcessor/pyproject.toml

@@ -20,11 +20,11 @@ dependencies = [
     "poppler-utils==0.1.0",
     "pydantic==2.13.4",
     "pydantic-settings==2.14.2",
-    "pymongo==4.17.0",
+    "pymongo==4.18.2",
     "python-dotenv==1.2.2",
     "tiktoken==0.13.0",
     "protobuf==6.33.6",
-    "pyjwt==2.13.0",
+    "pyjwt==2.15.0",
     "pyasn1==0.6.4",
 ]
 

src/ContentProcessor/requirements.txt

@@ -35,8 +35,8 @@ pydantic==2.13.4
 pydantic-core==2.46.4
 pydantic-settings==2.14.2
 pygments==2.20.0
-pyjwt==2.13.0
-pymongo==4.17.0
+pyjwt==2.15.0
+pymongo==4.18.2
 pytest==9.1.1
 pytest-asyncio==1.4.0
 pytest-cov==7.1.0
@@ -53,4 +53,4 @@ tiktoken==0.13.0
 typing-extensions==4.16.0
 typing-inspection==0.4.2
 tzdata==2026.3
-urllib3==2.7.0
+urllib3==2.8.0

src/ContentProcessorAPI/pyproject.toml

@@ -15,19 +15,19 @@ dependencies = [
     "pydantic==2.13.4",
     "pydantic-settings==2.14.2",
     "pygments==2.20.0",
-    "pymongo==4.17.0",
+    "pymongo==4.18.2",
     "python-dotenv==1.2.2",
     "python-multipart==0.0.32",
     "starlette==1.3.1",
     "uvicorn[standard]==0.51.0",
     "h11==0.16.0",
-    "urllib3==2.7.0",
+    "urllib3==2.8.0",
     "opentelemetry-api==1.43.0",
     "sas-cosmosdb==0.1.5",
     "azure-monitor-events-extension>=0.1.0",
     "azure-monitor-opentelemetry==1.8.9",
     "cryptography==50.0.0",
-    "pyjwt==2.13.0",
+    "pyjwt==2.15.0",
     "jsonschema==4.26.0",
 ]
 

src/ContentProcessorAPI/requirements.txt

@@ -40,8 +40,8 @@ pydantic-core==2.46.4
 pydantic-extra-types==2.11.1
 pydantic-settings==2.14.2
 pygments==2.20.0
-pyjwt==2.13.0
-pymongo==4.17.0
+pyjwt==2.15.0
+pymongo==4.18.2
 python-dotenv==1.2.2
 python-multipart==0.0.32
 pyyaml==6.0.3
@@ -55,7 +55,7 @@ starlette==1.3.1
 typer==0.27.0
 typing-extensions==4.16.0
 typing-inspection==0.4.2
-urllib3==2.7.0
+urllib3==2.8.0
 uvicorn==0.51.0
 watchfiles==1.2.0
 websockets==16.1.1

src/ContentProcessorWeb/package.json

@@ -17,7 +17,6 @@
     "cra-template-typescript": "1.3.0",
     "i18next": "^25.8.4",
     "json-edit-react": "^1.29.0",
-    "node-forge": ">=1.4.0",
     "nth-check": "3.0.1",
     "postcss": "8.5.23",
     "prismjs": "^1.30.0",
@@ -101,21 +100,20 @@
     "overrides": {
       "body-parser": "1.20.6",
       "colord": "2.9.4",
-      "shell-quote": "^1.9.0",
+      "shell-quote": "1.11.0",
       "form-data": "^4.0.6",
       "ws": "^8.21.0",
       "js-yaml": "^4.3.2",
       "@babel/core": "^7.29.6",
       "postcss": "8.5.23",
-      "postcss-selector-parser@^6.0.0": "6.1.3",
-      "postcss-selector-parser@^7.0.0": "7.1.3",
+      "postcss-selector-parser@^6.0.0": "7.1.6",
+      "postcss-selector-parser@^7.0.0": "7.1.6",
       "nth-check": "^2.1.1",
       "string_decoder": "^1.3.0",
       "typescript": "^5.8.3",
-      "node-forge": "^1.4.0",
       "http-proxy-middleware": "2.0.10",
       "@tootallnate/once": "^3.0.1",
-      "brace-expansion": "2.1.4",
+      "brace-expansion": "2.1.7",
       "flatted": "^3.4.2",
       "immutable": "^5.1.8",
       "lodash": "^4.17.24",
@@ -131,14 +129,17 @@
       "svgo": "^2.8.4",
       "jsonpath": "^1.3.0",
       "follow-redirects": "^1.16.0",
-      "axios": "1.18.0",
+      "axios": "1.20.0",
       "browserslist": "4.28.7",
-      "fast-uri": "3.1.7",
+      "fast-uri": "3.1.8",
       "websocket-driver": "^0.7.5",
       "@babel/plugin-transform-modules-systemjs": "7.29.4",
       "@ungap/structured-clone": "1.3.1",
       "uuid": "11.1.1",
-      "nanoid": "3.3.18"
+      "nanoid": "3.3.18",
+      "proxy-addr": "2.0.8",
+      "compression": "1.8.2",
+      "source-map-js": "1.2.2"
     },
     "onlyBuiltDependencies": [
       "@parcel/watcher",

src/ContentProcessorWorkflow/pyproject.toml

@@ -33,7 +33,7 @@ dependencies = [
     "authlib==1.6.12",
     "protobuf==6.33.6",
     "cryptography==50.0.0",
-    "pyjwt==2.13.0",
+    "pyjwt==2.15.0",
     "pyasn1==0.6.4",
     "pydantic-settings==2.14.2",
 ]