Skip to content

vyos-http-api-tools: T9571: update pinned dependencies - #72

Draft
rasty94 wants to merge 2 commits into
vyos:rollingfrom
rasty94:T9571/bump-dependencies
Draft

rasty94 wants to merge 2 commits into
vyos:rollingfrom
rasty94:T9571/bump-dependencies

Conversation

@rasty94

@rasty94 rasty94 commented Nov 4, 2026 •

Copy link
Copy Markdown

https://vyos.dev/T9571

Upgrades all pins. Checked against vyos-1x imports (fastapi, starlette CORS, ariadne GraphQL/snake_case_fallback_resolvers, uvicorn, jwt, pam) plus a GraphQL smoke test on Python 3.11; pip check clean; pip-audit reports no known vulnerabilities (the old starlette 0.41.3 had ~10).

ariadne is capped at <0.29: 0.29+ removes snake_case_fallback_resolvers, imported by vyos-1x src/services/api/graphql/bindings.py. Lifting the cap needs a vyos-1x change first. Not yet tested inside a full ISO build.

@coderabbitai

coderabbitai Bot commented Nov 4, 2026

Copy link
Copy Markdown

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

1 participant