diff --git a/requirements-dev.txt b/requirements-dev.txt index f77a144..0a86cc2 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -2,25 +2,25 @@ # Les tests tournent hors Docker : les imports lourds optionnels (xgboost, # codecarbon, openstacksdk) sont volontairement absents — les services ont des # fallbacks lazy que les tests de caractérisation figent explicitement. -fastapi>=0.128.8 -uvicorn[standard]>=0.39.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 httpx>=0.28.1 pydantic>=2.13.4 python-multipart>=0.0.32 pyyaml>=6.0.3 -redis>=7.0.1 +redis>=8.1.0 jinja2>=3.1.6 -numpy>=2.0.2 +numpy>=2.2.6 tiktoken>=0.13.0 # Security floors for transitive deps flagged by pip-audit, pinned to patched # versions (resolution verified compatible with fastapi/uvicorn/tiktoken). -# Note: starlette>=1.3.1 implies fastapi>=0.137.1 (first release to drop the -# starlette upper-bound) — which is what fastapi>=0.128.8 already resolves to. -starlette>=1.3.1 +# Note: starlette>=1.4.1 implies fastapi>=0.137.1 (first release to drop the +# starlette upper-bound) — which is what fastapi>=0.141.1 already resolves to. +starlette>=1.4.1 python-dotenv>=1.2.2 -requests>=2.33.0 +requests>=2.34.2 urllib3>=2.7.0 -pytest>=9.0.3 -pytest-asyncio>=1.2.0 +pytest>=9.1.1 +pytest-asyncio>=1.4.0 diff --git a/services/api/requirements.txt b/services/api/requirements.txt index c510433..95326bc 100644 --- a/services/api/requirements.txt +++ b/services/api/requirements.txt @@ -1,7 +1,7 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 pydantic>=2.13.4 httpx>=0.28.1 diff --git a/services/fake_portal/requirements.txt b/services/fake_portal/requirements.txt index aa92f4a..56fffec 100644 --- a/services/fake_portal/requirements.txt +++ b/services/fake_portal/requirements.txt @@ -1,8 +1,8 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 httpx>=0.28.1 pydantic>=2.13.4 python-multipart>=0.0.32 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 diff --git a/services/ghost_shell/requirements.txt b/services/ghost_shell/requirements.txt index 158132e..fba7a29 100644 --- a/services/ghost_shell/requirements.txt +++ b/services/ghost_shell/requirements.txt @@ -1,10 +1,10 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 pydantic>=2.13.4 httpx>=0.28.1 pyyaml>=6.0.3 -redis>=8.0.0 +redis>=8.1.0 jinja2>=3.1.6 diff --git a/services/mcp_server/requirements.txt b/services/mcp_server/requirements.txt index 2c0c9d8..c1ffe24 100644 --- a/services/mcp_server/requirements.txt +++ b/services/mcp_server/requirements.txt @@ -1,13 +1,13 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 pydantic>=2.13.4 httpx>=0.28.1 -redis>=8.0.0 # REROUTE_BACKEND=redis (cloud-free inline-proxy backend) +redis>=8.1.0 # REROUTE_BACKEND=redis (cloud-free inline-proxy backend) # OPTIONAL — only needed for a real OVH/OpenStack reroute (REROUTE_BACKEND=octavia). # The default mock backend (REROUTE_BACKEND=mock) does not import these. ovh>=1.2 -openstacksdk>=4.16.0 +openstacksdk>=4.18.0 diff --git a/services/mirage_metrics/requirements.txt b/services/mirage_metrics/requirements.txt index fb8fc82..ff36944 100644 --- a/services/mirage_metrics/requirements.txt +++ b/services/mirage_metrics/requirements.txt @@ -1,7 +1,7 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 pydantic>=2.13.4 tiktoken>=0.13.0 diff --git a/services/orchestrator/requirements.txt b/services/orchestrator/requirements.txt index 417bbb4..3f9faf4 100644 --- a/services/orchestrator/requirements.txt +++ b/services/orchestrator/requirements.txt @@ -1,8 +1,8 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 httpx>=0.28.1 pydantic>=2.13.4 -redis>=8.0.0 # ORCHESTRATOR_STATE_BACKEND=redis (shared, crash-safe engagement state) +redis>=8.1.0 # ORCHESTRATOR_STATE_BACKEND=redis (shared, crash-safe engagement state) diff --git a/services/sentinel/requirements.txt b/services/sentinel/requirements.txt index 704d492..b94fc72 100644 --- a/services/sentinel/requirements.txt +++ b/services/sentinel/requirements.txt @@ -1,11 +1,11 @@ -fastapi>=0.137.1 -uvicorn[standard]>=0.49.0 +fastapi>=0.141.1 +uvicorn[standard]>=0.52.1 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn. -starlette>=1.3.1 +starlette>=1.4.1 python-dotenv>=1.2.2 httpx>=0.28.1 pydantic>=2.13.4 pyyaml>=6.0.3 -redis>=8.0.0 -numpy>=2.4.6 -xgboost>=3.2.0 +redis>=8.1.0 +numpy>=2.5.1 +xgboost>=3.4.0