From 70ab9029ef5117ce0d42247d48c6ad16dda70153 Mon Sep 17 00:00:00 2001 From: David del Real Sifuentes Date: Wed, 8 Jul 2026 22:18:35 +0000 Subject: [PATCH] chore: bundle final dependabot alerts (dotenv, lxml, jwcrypto, wheel, transformers, markdown) - Bumped `python-dotenv`, `lxml`, `jwcrypto`, `wheel`, `transformers`, and `Markdown` across various samples. - This bundles the last remaining single/loose package updates to resolve outstanding Dependabot vulnerabilities in one PR. --- auth/cloud-client-temp/requirements.txt | 2 +- auth/custom-credentials/aws/requirements.txt | 2 +- cloud-media-livestream/keypublisher/requirements.txt | 2 +- kms/snippets/requirements.txt | 2 +- kubernetes_engine/django_tutorial/requirements.txt | 2 +- .../weather-forecasting/serving/weather-model/pyproject.toml | 2 +- run/markdown-preview/renderer/requirements.txt | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/auth/cloud-client-temp/requirements.txt b/auth/cloud-client-temp/requirements.txt index fef98a05d07..31d83c9e427 100644 --- a/auth/cloud-client-temp/requirements.txt +++ b/auth/cloud-client-temp/requirements.txt @@ -4,4 +4,4 @@ google-auth==2.47.0 pytest==9.0.3; python_version >= "3.10" boto3>=1.26.0 requests==2.34.2; python_version >= '3.10' -python-dotenv==1.2.1 +python-dotenv==1.2.2 diff --git a/auth/custom-credentials/aws/requirements.txt b/auth/custom-credentials/aws/requirements.txt index 755bdfddec0..59b59103715 100644 --- a/auth/custom-credentials/aws/requirements.txt +++ b/auth/custom-credentials/aws/requirements.txt @@ -1,5 +1,5 @@ boto3==1.40.53 google-auth==2.43.0 google-cloud-storage==2.19.0 -python-dotenv==1.1.1 +python-dotenv==1.2.2 requests==2.34.2; python_version >= '3.10' diff --git a/cloud-media-livestream/keypublisher/requirements.txt b/cloud-media-livestream/keypublisher/requirements.txt index 4e910840405..1f54a1e2225 100644 --- a/cloud-media-livestream/keypublisher/requirements.txt +++ b/cloud-media-livestream/keypublisher/requirements.txt @@ -1,7 +1,7 @@ Flask==3.1.3; python_version >= '3.9' functions-framework==3.9.2 google-cloud-secret-manager==2.21.1 -lxml==5.2.1 +lxml==6.1.1 pycryptodome==3.21.0 pyOpenSSL==25.0.0 requests==2.34.2; python_version >= '3.10' diff --git a/kms/snippets/requirements.txt b/kms/snippets/requirements.txt index 1eaf72a511c..e0d8475f7e2 100644 --- a/kms/snippets/requirements.txt +++ b/kms/snippets/requirements.txt @@ -1,4 +1,4 @@ google-cloud-kms==3.11.0 cryptography==48.0.1 crcmod==1.7 -jwcrypto==1.5.6 \ No newline at end of file +jwcrypto==1.5.8 \ No newline at end of file diff --git a/kubernetes_engine/django_tutorial/requirements.txt b/kubernetes_engine/django_tutorial/requirements.txt index 771d0bcd1c5..e4ab869d79d 100644 --- a/kubernetes_engine/django_tutorial/requirements.txt +++ b/kubernetes_engine/django_tutorial/requirements.txt @@ -2,7 +2,7 @@ Django==6.0.1; python_version >= "3.12" # Uncomment the mysqlclient requirement if you are using MySQL rather than # PostgreSQL. You must also have a MySQL client installed in that case. #mysqlclient==1.4.1 -wheel==0.40.0 +wheel==0.47.0 gunicorn==23.0.0; python_version > '3.0' # psycopg2==2.8.4 # uncomment if you prefer to build from source psycopg2-binary==2.9.11 diff --git a/people-and-planet-ai/weather-forecasting/serving/weather-model/pyproject.toml b/people-and-planet-ai/weather-forecasting/serving/weather-model/pyproject.toml index 43c03683ccd..406973ba077 100644 --- a/people-and-planet-ai/weather-forecasting/serving/weather-model/pyproject.toml +++ b/people-and-planet-ai/weather-forecasting/serving/weather-model/pyproject.toml @@ -19,7 +19,7 @@ version = "1.0.0" dependencies = [ "datasets==4.0.0", "torch==2.8.0", # make sure this matches the `container_uri` in `notebooks/3-training.ipynb` - "transformers==5.0.0", + "transformers==5.13.0", ] [project.scripts] diff --git a/run/markdown-preview/renderer/requirements.txt b/run/markdown-preview/renderer/requirements.txt index accf4530441..625ae2ec86c 100644 --- a/run/markdown-preview/renderer/requirements.txt +++ b/run/markdown-preview/renderer/requirements.txt @@ -1,6 +1,6 @@ Flask==3.1.3; python_version >= '3.9' gunicorn==23.0.0 -Markdown==3.7 +Markdown==3.10.2 bleach==6.2.0; python_version >= "3.9" bleach==6.1.0; python_version <= "3.8" Werkzeug==3.1.8; python_version >= '3.9'