Skip to content

chore: resolve open dependabot security alerts #399

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jonathannorris wants to merge 4 commits into
base: main
Choose a base branch
from
+230 −210
Open

chore: resolve open dependabot security alerts #399

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
8c689a9
chore: resolve open dependabot security alerts
jonathannorris Jun 8, 2026
2f2a9d2
chore: bump cryptography to 49.0.0 to resolve dependabot alert #45
jonathannorris Jun 22, 2026
6f5ccc7
chore: bump grpcio to 1.81.1 to match generated grpc code
jonathannorris Jun 22, 2026
ec72952
chore: pin grpcio-tools to match runtime grpcio version
jonathannorris Jul 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions providers/openfeature-provider-flagd/pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,12 @@ dependencies = [
"protobuf~=6.0",
"hatch-protobuf",
"mypy-protobuf~=3.0",
# Pin grpcio-tools to the same version as the runtime `grpcio` dependency
# above. hatch-protobuf otherwise resolves grpcio-tools unpinned in an
# isolated build environment, so newer grpcio-tools releases can generate
# gRPC stubs that are incompatible with the pinned runtime grpcio,
# breaking mypy/import at build time.
"grpcio-tools==1.81.1",
]
proto_paths = [
".",
Expand Down
Loading
Loading