Mish Ushakov
55e9e0eb5a
## Summary Resolves all 31 open [Dependabot alerts](https://github.com/e2b-dev/e2b/security/dependabot) across the workspace. - **npm** — added range-based `pnpm.overrides` to bump vulnerable transitive deps to their patched versions: postcss, vite, lodash, brace-expansion, picomatch (2.x + 4.x), yaml, @tootallnate/once, smol-toml, flatted, and minimatch (3.x/5.x/9.x/10.x). - **python-sdk** — bumped dev deps in `poetry.lock`: pytest 7.4 → 9.0.3 (with constraint update in `pyproject.toml`), pytest-asyncio 0.23 → 1.3 (required for pytest 9), python-dotenv 1.2.2, pygments 2.20.0, requests 2.33.1, black 26.3.1; removed 4 now-unused `# ty: ignore` directives that pytest 9's stricter type signatures made obsolete. ## Test plan - [x] \`pnpm run typecheck\` passes - [x] \`pnpm run lint\` passes - [x] \`pnpm run format\` clean - [x] CLI tests (80/80) and js-sdk/python-sdk unit tests pass; integration tests not run locally (need \`E2B_API_KEY\`) 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
366 B
366 B
@e2b/python-sdk, @e2b/cli, e2b
| @e2b/python-sdk | @e2b/cli | e2b |
|---|---|---|
| patch | patch | patch |
resolve Dependabot security alerts: bump vulnerable transitive npm deps via pnpm overrides (postcss, vite, lodash, brace-expansion, picomatch, yaml, @tootallnate/once, smol-toml, flatted, minimatch) and python dev deps in poetry.lock (pytest, pytest-asyncio, python-dotenv, pygments, requests, black)