Richard Nixon
ed6dea4307
Closes Dependabot PRs #13 (websockets) and #1 (setup-python). websockets: 15.0.1 -> 16.0 Major bump but the API we use (serve(handler), handler arg exposing request.path, ws.send, close(code, reason)) is unchanged. Verified by running the existing 89-test suite against websockets==16.0 locally — _ws_token_ok still reads the query string as before. actions/setup-python: v5 -> v6 First-party action, low risk. The previous version was already tag-pinned (acceptable for first-party). cache: 'pip' input is preserved. pip-audit remains clean (0 known vulnerabilities).
19 lines
351 B
Text
19 lines
351 B
Text
aiohappyeyeballs==2.6.1
|
|
aiohttp==3.13.4
|
|
aiosignal==1.4.0
|
|
annotated-types==0.7.0
|
|
attrs==26.1.0
|
|
frozenlist==1.7.0
|
|
gmqtt==0.7.0
|
|
idna==3.15
|
|
multidict==6.6.4
|
|
propcache==0.3.2
|
|
psutil==7.0.0
|
|
pydantic==2.13.4
|
|
pydantic-core==2.46.4
|
|
pydantic-settings==2.14.1
|
|
python-dotenv==1.2.2
|
|
typing-inspection==0.4.2
|
|
typing_extensions==4.15.0
|
|
websockets==16.0
|
|
yarl==1.23.0
|