Update dependencies to address security issues. (#1493)

* fastapi 0.115.3, dropping support for older versions due to CVE-2024-47874 * starlette 0.41.2, closes #1443 * werkzeug 3.0.6
Chainlit · Nov 6, 2024 · 63374a2 · 63374a2
1 parent 1a38d7f
commit 63374a2
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 14 deletions.
diff --git a/.github/workflows/pytest.yaml b/.github/workflows/pytest.yaml
@@ -10,7 +10,7 @@ jobs:
     strategy:
       matrix:
         python-version: ['3.9', '3.10', '3.11', '3.12']
-        fastapi-version: ['0.110', '0.111', '0.112']
+        fastapi-version: ['0.115']
     env:
       BACKEND_DIR: ./backend
     steps:

diff --git a/backend/poetry.lock b/backend/poetry.lock
diff --git a/backend/pyproject.toml b/backend/pyproject.toml
@@ -43,8 +43,8 @@ python = ">=3.9,<4.0.0"
 httpx = ">=0.23.0"
 literalai = "0.0.623"
 dataclasses_json = "^0.6.7"
-fastapi = ">=0.110.1,<0.113"
-starlette = "^0.37.2"
+fastapi = ">=0.115.3,<0.116"
+starlette = "^0.41.2"
 uvicorn = "^0.25.0"
 python-socketio = "^5.11.0"
 aiofiles = "^23.1.0"