Skip to content

Updating dependencies to fix reported vulnerabilities#4012

Merged
petyaslavova merged 2 commits into
masterfrom
ps_fix_depenedencies
Apr 1, 2026
Merged

Updating dependencies to fix reported vulnerabilities#4012
petyaslavova merged 2 commits into
masterfrom
ps_fix_depenedencies

Conversation

@petyaslavova
Copy link
Copy Markdown
Collaborator

@petyaslavova petyaslavova commented Mar 30, 2026

Updating dependencies to fix reported vulnerabilities


Note

Low Risk
Primarily dependency bumps and CI/test-only changes; runtime impact is limited to consumers of the optional jwt extra and should be covered by existing test suites.

Overview
Updates dependency management to address reported vulnerabilities by bumping redis-entraid to 1.1.2, raising the optional jwt extra to PyJWT>=2.12.0, and adjusting the CI pip-audit ignore list to a new CVE entry.

Stabilizes/optimizes tests: maintenance-notification metrics tests now mock connection._sock.getsockname() consistently, observability recorder tests reset the UpDownCounter mock to avoid cross-test pollution, and search indexing tests batch pipeline hset writes (instead of executing a single huge pipeline) to reduce resource pressure/timeouts.

Written by Cursor Bugbot for commit 0397e3e. This will update automatically on new commits. Configure here.

@petyaslavova petyaslavova added maintenance Maintenance (CI, Releases, etc) dependencies Pull requests that update a dependency file labels Mar 30, 2026
@jit-ci
Copy link
Copy Markdown

jit-ci Bot commented Mar 30, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Comment thread pyproject.toml Outdated
…s - would not be compatible with msal dependency defined in entraid
@petyaslavova petyaslavova merged commit ea8dd2f into master Apr 1, 2026
127 of 130 checks passed
@petyaslavova petyaslavova deleted the ps_fix_depenedencies branch April 1, 2026 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance Maintenance (CI, Releases, etc)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants