From 6eb74a5efa579add384a0d20bc4fcfdc7e625615 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Nov 2026 18:38:59 +0000 Subject: [PATCH] build(deps): bump the qa-engine group across 1 directory with 7 updates Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [pandas](https://github.com/pandas-dev/pandas), [starlette](https://github.com/Kludex/starlette), [anyio](https://github.com/agronholm/anyio), [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow) to permit the latest version. Updates `fastapi` from 0.161.1 to 0.162.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.161.1...0.162.0) Updates `pandas` from 3.0.6 to 3.1.0 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](https://github.com/pandas-dev/pandas/compare/v3.0.6...v3.1.0) Updates `starlette` to 1.10.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.3.1...1.10.0) Updates `anyio` to 4.15.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](https://github.com/agronholm/anyio/compare/4.14.2...4.15.1) Updates `certifi` to 2026.10.23 - [Commits](https://github.com/certifi/python-certifi/compare/2026.10.19...2026.10.23) Updates `idna` to 3.20 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](https://github.com/kjd/idna/compare/v3.15...v3.20) Updates `pillow` to 13.0.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/12.3.0...13.0.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.162.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: qa-engine - dependency-name: pandas dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: qa-engine - dependency-name: starlette dependency-version: 1.10.0 dependency-type: direct:production dependency-group: qa-engine - dependency-name: anyio dependency-version: 4.15.1 dependency-type: direct:production dependency-group: qa-engine - dependency-name: certifi dependency-version: 2026.10.23 dependency-type: direct:production dependency-group: qa-engine - dependency-name: idna dependency-version: '3.20' dependency-type: direct:production dependency-group: qa-engine - dependency-name: pillow dependency-version: 13.0.0 dependency-type: direct:production dependency-group: qa-engine ... Signed-off-by: dependabot[bot] --- backend/qa_engine/requirements.txt | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/backend/qa_engine/requirements.txt b/backend/qa_engine/requirements.txt index 9f6f322..b6b3cdc 100644 --- a/backend/qa_engine/requirements.txt +++ b/backend/qa_engine/requirements.txt @@ -1,4 +1,4 @@ -fastapi==0.161.1 +fastapi==0.162.0 uvicorn==0.54.0 geopandas==1.2.0 shapely==2.2.0 @@ -6,14 +6,14 @@ fiona==1.10.1 groq==1.7.0 python-multipart==0.0.32 numpy<3.0.0 -pandas==3.0.6 +pandas==3.1.0 openpyxl==3.1.5 supabase fpdf2==2.8.9 # Mínimos de dependencias transitivas con vulnerabilidades corregidas (OSV-Scanner) -starlette>=1.3.1 -anyio>=4.14.2 -certifi>=2026.10.19 -idna>=3.15 -pillow>=12.3.0 +starlette>=1.10.0 +anyio>=4.15.1 +certifi>=2026.10.23 +idna>=3.20 +pillow>=13.0.0