From ed58550fc516780f19158ac2e2943293e06694dc Mon Sep 17 00:00:00 2001 From: rasty94 Date: Wed, 4 Nov 2026 22:17:06 +0100 Subject: [PATCH 1/2] vyos-http-api-tools: T9571: update pinned dependencies --- debian/changelog | 6 +++++ requirements.txt | 59 ++++++++++++++++++++++++++++-------------------- 2 files changed, 41 insertions(+), 24 deletions(-) diff --git a/debian/changelog b/debian/changelog index 48cb46d..67f0e74 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +vyos-http-api-tools (2.10) unstable; urgency=medium + + * Upgrade all pinned dependencies (fastapi, starlette, pydantic, uvicorn, ariadne, ...) + + -- VyOS maintainers and contributors Wed, 04 Nov 2026 12:00:00 +0000 + vyos-http-api-tools (2.9) unstable; urgency=medium * Update version of graphql-core to 3.2.12 diff --git a/requirements.txt b/requirements.txt index 18e5171..b3c3bea 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,19 +4,21 @@ # # pip-compile requirements.in # -annotated-types==0.7.0 +annotated-doc==0.0.5 + # via fastapi +annotated-types==0.8.0 # via pydantic -anyio==4.14.2 +anyio==4.16.0 # via # starlette # watchfiles -ariadne==0.23.0 +ariadne==1.1.1 # via -r requirements.in -click==8.1.7 +click==8.5.0 # via uvicorn -fastapi==0.115.5 +fastapi==0.162.0 # via -r requirements.in -graphql-core==3.2.12 +graphql-core==3.2.13 # via # ariadne # sgqlc @@ -24,46 +26,55 @@ h11==0.16.0 # via # uvicorn # wsproto -httptools==0.6.4 +httptools==0.9.0 # via uvicorn -idna==3.15 +idna==3.20 # via anyio -makefun==1.15.6 +makefun==1.16.0 # via -r requirements.in -pydantic==2.10.2 +opentelemetry-api==1.45.2 + # via fastapi +pydantic==2.14.2 # via fastapi -pydantic-core==2.27.1 +pydantic-core==2.50.2 # via pydantic -pyjwt==2.15.0 +pyjwt==2.15.1 # via -r requirements.in -python-dotenv==1.2.2 +python-dotenv==1.2.4 # via uvicorn -python-multipart==0.0.31 +python-multipart==0.0.33 # via -r requirements.in -python-pam==2.0.2 +python-pam==2.1.1 # via -r requirements.in -pyyaml==6.0.2 +pyyaml==6.0.3 # via uvicorn -sgqlc==16.4 +sgqlc==18 # via -r requirements.in -starlette==0.41.3 +starlette==1.10.0 # via # ariadne # fastapi -typing-extensions==4.12.2 +typing-extensions==4.16.0 # via # anyio # ariadne # fastapi + # opentelemetry-api # pydantic # pydantic-core -uvicorn[standard]==0.32.1 + # starlette + # typing-inspection +typing-inspection==0.4.5 + # via + # fastapi + # pydantic +uvicorn[standard]==0.54.0 # via -r requirements.in -uvloop==0.21.0 +uvloop==0.23.0 # via uvicorn -watchfiles==1.0.0 +watchfiles==1.3.0 # via uvicorn -websockets==14.1 +websockets==17.4 # via uvicorn -wsproto==1.2.0 +wsproto==1.3.2 # via -r requirements.in From 093374eee18a244ec9376a98b4b3a8bb43333029 Mon Sep 17 00:00:00 2001 From: rasty94 Date: Wed, 4 Nov 2026 22:22:39 +0100 Subject: [PATCH 2/2] vyos-http-api-tools: T9571: cap ariadne below 0.29 (vyos-1x needs snake_case_fallback_resolvers) --- requirements.in | 2 +- requirements.txt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.in b/requirements.in index 1007136..42a7284 100644 --- a/requirements.in +++ b/requirements.in @@ -2,7 +2,7 @@ fastapi python-multipart uvicorn[standard] wsproto -ariadne +ariadne<0.29 # 0.29 removed snake_case_fallback_resolvers, used by vyos-1x makefun sgqlc pyjwt diff --git a/requirements.txt b/requirements.txt index b3c3bea..863d606 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,7 +12,7 @@ anyio==4.16.0 # via # starlette # watchfiles -ariadne==1.1.1 +ariadne==0.28.0 # via -r requirements.in click==8.5.0 # via uvicorn @@ -50,7 +50,7 @@ pyyaml==6.0.3 # via uvicorn sgqlc==18 # via -r requirements.in -starlette==1.10.0 +starlette==0.52.1 # via # ariadne # fastapi