Unreleased¶
Summary¶
This release fixes vulnerabilities by updating transitive dependencies in the poetry.lock file.
Name |
Version |
ID |
Fix Versions |
Updated to |
|---|---|---|---|---|
black |
25.12.0 |
CVE-2026-32274 |
26.3.1 |
26.3.1 |
cryptography |
46.0.5 |
CVE-2026-34073 |
46.0.6 |
46.0.6 |
pygments |
2.19.2 |
CVE-2026-4539 |
2.20.0 |
2.20.0 |
requests |
2.32.5 |
CVE-2026-25645 |
2.33.0 |
2.33.1 |
tornado |
6.5.4 |
GHSA-78cv-mqj4-43f7 |
6.5.5 |
6.5.5 |
tornado |
6.5.4 |
CVE-2026-31958 |
6.5.5 |
6.5.5 |
To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.
Refactoring:¶
#602: Removed joblib Python module dependency
#594: Removed old integration tests
Bug Fixes:¶
#600: Fixed nox session name
Security Issues:¶
#611: Updated to PTB 6.1.1 & fixed vulnerabilities by re-locking transitive dependencies