Files
metabuilder/frontends/emailclient/deployment/docker/email-service/requirements.txt
rw 9d4244891e fix(ci,deps): correct action versions and patch security vulnerabilities
GitHub Actions:
- checkout@v4 → @v6 (v6 is current, v4 was wrong downgrade)
- upload-artifact@v4 → @v7 (latest), @v6 → @v7 in dbal-tests.yml
- download-artifact@v4 → @v8 (latest)
- cache@v6 → @v5 (v6 does not exist, v5 is latest)
- codeql-action@v4 confirmed correct

Security (Dependabot):
- next 16.1.5 → 16.1.7 (dockerterminal): HTTP smuggling, CSRF, DoS fixes
- PyJWT 2.10.1 → 2.12.0 (5 requirements.txt): unknown crit header bypass
- CairoSVG 2.8.2 → 2.9.0 (pcbgenerator): recursive <use> ReDoS
- postgres overrides: add hono >=4.12.4, @hono/node-server >=1.19.10,
  rollup >=4.59.0, serialize-javascript >=7.0.3 for transitive vulns

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-20 20:13:54 +00:00

35 lines
626 B
Plaintext

# Email Service Dependencies - Production Pinned Versions
# Flask Web Framework
flask==3.1.3
flask-cors==6.0.0
flask-limiter==3.5.0
gunicorn==23.0.0
werkzeug==3.1.6
# Email Protocols & Clients
imapclient==3.0.1
# smtplib is a built-in Python module, no pip install needed
# Background Job Processing
celery==5.4.0
redis==5.0.1
# Database & ORM
sqlalchemy==2.0.23
flask-sqlalchemy==3.1.1
psycopg2-binary==2.9.9
# Configuration & Environment
python-dotenv==1.0.0
# Security & Encryption
cryptography==46.0.5
pyjwt==2.12.0
# HTTP & Requests
requests==2.32.4
urllib3==2.6.3
# Logging & Monitoring
python-json-logger==2.0.7