chore(deps): Bump the pip group across 10 directories with 11 updates by dependabot[bot] · Pull Request #79 · cisco-ai-defense/ai-defense-python-sdk

dependabot · 2026-03-17T20:21:54Z

Bumps the pip group with 3 updates in the /examples/agentsec/1-simple directory: cryptography, python-multipart and tornado.
Bumps the pip group with 5 updates in the /examples/agentsec/2-agent-frameworks/autogen-agent directory:

Package	From	To
cryptography	`46.0.3`	`46.0.5`
pillow	`12.1.0`	`12.1.1`
protobuf	`5.29.5`	`5.29.6`
python-multipart	`0.0.21`	`0.0.22`
pyasn1	`0.6.2`	`0.6.3`

Bumps the pip group with 6 updates in the /examples/agentsec/2-agent-frameworks/crewai-agent directory:

Package	From	To
cryptography	`46.0.3`	`46.0.5`
pillow	`12.1.0`	`12.1.1`
protobuf	`6.33.4`	`6.33.5`
python-multipart	`0.0.21`	`0.0.22`
pyasn1	`0.6.2`	`0.6.3`
orjson	`3.11.5`	`3.11.6`

Bumps the pip group with 8 updates in the /examples/agentsec/2-agent-frameworks/langchain-agent directory:

Package	From	To
cryptography	`46.0.3`	`46.0.5`
protobuf	`6.33.4`	`6.33.5`
python-multipart	`0.0.21`	`0.0.22`
tornado	`6.5.4`	`6.5.5`
pyasn1	`0.6.2`	`0.6.3`
orjson	`3.11.5`	`3.11.6`
langchain-core	`1.2.7`	`1.2.11`
langgraph	`1.0.6`	`1.0.10rc1`

Bumps the pip group with 7 updates in the /examples/agentsec/2-agent-frameworks/langgraph-agent directory:

Package	From	To
cryptography	`46.0.3`	`46.0.5`
protobuf	`6.33.4`	`6.33.5`
python-multipart	`0.0.21`	`0.0.22`
pyasn1	`0.6.2`	`0.6.3`
orjson	`3.11.5`	`3.11.6`
langchain-core	`1.2.7`	`1.2.11`
langgraph	`1.0.7`	`1.0.10rc1`

Bumps the pip group with 3 updates in the /examples/agentsec/2-agent-frameworks/openai-agent directory: cryptography, python-multipart and tornado.
Bumps the pip group with 4 updates in the /examples/agentsec/2-agent-frameworks/strands-agent directory: cryptography, protobuf, python-multipart and pyasn1.
Bumps the pip group with 3 updates in the /examples/agentsec/3-agent-runtimes/amazon-bedrock-agentcore directory: cryptography, python-multipart and tornado.
Bumps the pip group with 3 updates in the /examples/agentsec/3-agent-runtimes/gcp-vertex-ai-agent-engine directory: tornado, pyasn1 and langgraph.
Bumps the pip group with 6 updates in the /examples/agentsec/3-agent-runtimes/microsoft-foundry directory:

Package	From	To
cryptography	`46.0.3`	`46.0.5`
python-multipart	`0.0.21`	`0.0.22`
orjson	`3.11.5`	`3.11.6`
langchain-core	`1.2.7`	`1.2.11`
flask	`3.1.2`	`3.1.3`
werkzeug	`3.1.5`	`3.1.6`

Updates cryptography from 46.0.3 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
See full diff in compare view

Updates python-multipart from 0.0.21 to 0.0.22

Release notes

Sourced from python-multipart's releases.

Version 0.0.22

What's Changed

Drop directory path from filename in File 9433f4b.

Full Changelog: Kludex/python-multipart@0.0.21...0.0.22

Changelog

Sourced from python-multipart's changelog.

0.0.22 (2026-01-25)

Drop directory path from filename in File 9433f4b.

Commits

bea7bbb Version 0.0.22 (#222)
0fb59a9 chore: add return type on test (#221)
9433f4b Merge commit from fork
d5c91ec Bump the github-actions group with 2 updates (#219)
5a90631 bump uv (#218)
See full diff in compare view

Updates tornado from 6.5.4 to 6.5.5

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.5.5 releases/v6.5.4 releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2 releases/v3.2.1 releases/v3.2.0 releases/v3.1.1

... (truncated)

Commits

7d64650 Merge pull request #3586 from bdarnell/update-cibw
d05d59b build: Bump cibuildwheel to 3.4.0
c2f4673 Merge pull request #3585 from bdarnell/release-655
e5f1aa4 Release notes and version bump for v6.5.5
78a046f httputil: Add CRLF to _FORBIDDEN_HEADER_CHARS_RE
24a2d96 web: Validate characters in all cookie attributes.
119a195 httputil: Add limits on multipart form data parsing
See full diff in compare view

Updates cryptography from 46.0.3 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
See full diff in compare view

Updates pillow from 12.1.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Patch libavif for svt-av1 4.0 compatibility #9413 [@hugovk]

Other changes

Fix OOB Write with invalid tile extents #9427 [@radarhere]

Commits

5158d98 12.1.1 version bump
9000313 Fix OOB Write with invalid tile extents (#9427)
cd01118 Patch libavif for svt-av1 4.0 compatibility
See full diff in compare view

Updates protobuf from 5.29.5 to 5.29.6

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

This version includes breaking changes to: C++, Objective-C, PHP, Python.

[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

[C++] Make generator headers private (protocolbuffers/protobuf@3a2af35)

[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (protocolbuffers/protobuf@7a75898)

[C++] Add [[nodiscard]] to many APIs. (protocolbuffers/protobuf@a70115f)

[C++] Make the arena-enabled constructors of RepeatedField, RepeatedPtrField, and Map private. (protocolbuffers/protobuf@ef890c3)

[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (protocolbuffers/protobuf@b115358)

[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (protocolbuffers/protobuf@68346ec)

[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (protocolbuffers/protobuf@837a2cd)

[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() && !is_repeated()) instead (protocolbuffers/protobuf@9dbc5d4)

[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

[C++] All entity names have length limit (2afb0dc)

[ObjC] Remove generate_minimal_imports generation option warning (protocolbuffers/protobuf@45b1297)

[ObjC] Fix nullability annotations on some GPB*Dictionary types. (protocolbuffers/protobuf@ea67d6d)

[ObjC] Remove -[GPBFieldDescriptor optional] (protocolbuffers/protobuf@3414dc1)

[Other] Remove deprecated flag for enabling MSVC support (protocolbuffers/protobuf@97c979b)

[PHP] Remove deprecated PHP APIs (protocolbuffers/protobuf@9c45014)

[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (protocolbuffers/protobuf@4208121, protocolbuffers/protobuf@cd76e67, protocolbuffers/protobuf@4208121)

[PHP] Add PHP typehints for setters and remove redundant GPBUtil checks (protocolbuffers/protobuf#25296) (protocolbuffers/protobuf@aee03b7)

[PHP] support default values for editions/proto2 (protocolbuffers/protobuf#25161) (protocolbuffers/protobuf@b01099d)

[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (protocolbuffers/protobuf@5b116fe)

[Python] Remove float_format/double_format from python proto text_format (protocolbuffers/protobuf@e4854a1)

[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (protocolbuffers/protobuf@00aaca1)

[Python] Remove float_precision from python proto json_format (protocolbuffers/protobuf@f027f1f)

[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[Python] Remove deprecated FieldDescriptor.label (protocolbuffers/protobuf@0a8ff55)

[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Migration Guide may include additional guidance for breaking changes.

Bazel

Fix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (#25168) (protocolbuffers/protobuf@8c857c3)

Breaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

Feat(bazel): wire up prebuilt protoc toolchain (#24115) (protocolbuffers/protobuf@cc23698)

Migrate proto_descriptor_set (#23369) (protocolbuffers/protobuf@8d4dfdd)

Compiler

Ruby codegen: support generation of rbs files (#15633) (protocolbuffers/protobuf@6ebdf85)

Avoid collision name problems between a message named Xyz and a direct sibling enum named XyzView (protocolbuffers/protobuf@eba53e8)

Generalizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (protocolbuffers/protobuf@ed3c571)

Fix a bug with custom features outside of the pb package. (protocolbuffers/protobuf@872d3ce)

Fix import option handling when include_imports isn't set. (protocolbuffers/protobuf@9ef9e80)

Fix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (protocolbuffers/protobuf@1229d4a)

Prevent accidental stripping of debug_redact options via import option. (protocolbuffers/protobuf@f58b098)

C++

Add EnumerateEnumValues function. (protocolbuffers/protobuf@397d5d9)

... (truncated)

Commits

See full diff in compare view

Updates python-multipart from 0.0.21 to 0.0.22

Release notes

Sourced from python-multipart's releases.

Version 0.0.22

What's Changed

Drop directory path from filename in File 9433f4b.

Full Changelog: Kludex/python-multipart@0.0.21...0.0.22

Changelog

Sourced from python-multipart's changelog.

0.0.22 (2026-01-25)

Drop directory path from filename in File 9433f4b.

Commits

bea7bbb Version 0.0.22 (#222)
0fb59a9 chore: add return type on test (#221)
9433f4b Merge commit from fork
d5c91ec Bump the github-actions group with 2 updates (#219)
5a90631 bump uv (#218)
See full diff in compare view

Updates pyasn1 from 0.6.2 to 0.6.3

Release notes

Sourced from pyasn1's releases.

Release 0.6.3

It's a minor release.

Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (CVE-2026-30922).

Fixed OverflowError from oversized BER length field.

Fixed DeprecationWarning stacklevel for deprecated attributes.

Fixed asDateTime incorrect fractional seconds parsing.

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.3, released 16-03-2026

CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (thanks for reporting, romanticpragmatism)

Fixed OverflowError from oversized BER length field [issue #54](pyasn1/pyasn1#54) [pr #100](pyasn1/pyasn1#100)

Fixed DeprecationWarning stacklevel for deprecated attributes [issue #86](pyasn1/pyasn1#86) [pr #101](pyasn1/pyasn1#101)

Fixed asDateTime incorrect fractional seconds parsing [issue #81](pyasn1/pyasn1#81) [pr #102](pyasn1/pyasn1#102)

Commits

af65c3b Prepare release 0.6.3
5a49bd1 Merge commit from fork
5494ba4 Fix asDateTime incorrect fractional seconds parsing (#102)
71f486e Fix DeprecationWarning stacklevel for deprecated attributes (#101)
d7cb42d Fix OverflowError from oversized BER length field (#100)
See full diff in compare view

Updates cryptography from 46.0.3 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
See full diff in compare view

Updates pillow from 12.1.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Patch libavif for svt-av1 4.0 compatibility #9413 [@hugovk]

Other changes

Fix OOB Write with invalid tile extents #9427 [@radarhere]

Commits

5158d98 12.1.1 version bump
9000313 Fix OOB Write with invalid tile extents (#9427)
cd01118 Patch libavif for svt-av1 4.0 compatibility
See full diff in compare view

Updates protobuf from 6.33.4 to 6.33.5

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

This version includes breaking changes to: C++, Objective-C, PHP, Python.

[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

[C++] Make generator headers private (protocolbuffers/protobuf@3a2af35)

[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (protocolbuffers/protobuf@7a75898)

[C++] Add [[nodiscard]] to many APIs. (protocolbuffers/protobuf@a70115f)

[C++] Make the arena-enabled constructors of RepeatedField, RepeatedPtrField, and Map private. (protocolbuffers/protobuf@ef890c3)

[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (protocolbuffers/protobuf@b115358)

[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (protocolbuffers/protobuf@68346ec)

[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (protocolbuffers/protobuf@837a2cd)

[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() && !is_repeated()) instead (protocolbuffers/protobuf@9dbc5d4)

[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

[C++] All entity names have length limit (2afb0dc)

[ObjC] Remove generate_minimal_imports generation option warning (protocolbuffers/protobuf@45b1297)

[ObjC] Fix nullability annotations on some GPB*Dictionary types. (protocolbuffers/protobuf@ea67d6d)

[ObjC] Remove -[GPBFieldDescriptor optional] (protocolbuffers/protobuf@3414dc1)

[Other] Remove deprecated flag for enabling MSVC support (protocolbuffers/protobuf@97c979b)

[PHP] Remove deprecated PHP APIs (protocolbuffers/protobuf@9c45014)

[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (protocolbuffers/protobuf@4208121, protocolbuffers/protobuf@cd76e67, protocolbuffers/protobuf@4208121)

[PHP] Add PHP typehints for setters and remove redundant GPBUtil checks (protocolbuffers/protobuf#25296) (protocolbuffers/protobuf@aee03b7)

[PHP] support default values for editions/proto2 (protocolbuffers/protobuf#25161) (protocolbuffers/protobuf@b01099d)

[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (protocolbuffers/protobuf@5b116fe)

[Python] Remove float_format/double_format from python proto text_format (protocolbuffers/protobuf@e4854a1)

[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (protocolbuffers/protobuf@00aaca1)

[Python] Remove float_precision from python proto json_format (protocolbuffers/protobuf@f027f1f)

[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[Python] Remove deprecated FieldDescriptor.label (protocolbuffers/protobuf@0a8ff55)

[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Migration Guide may include additional guidance for breaking changes.

Bazel

Fix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (#25168) (protocolbuffers/protobuf@8c857c3)

Breaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

Feat(bazel): wire up prebuilt protoc toolchain (#24115) (protocolbuffers/protobuf@cc23698)

Migrate proto_descriptor_set (#23369) (protocolbuffers/protobuf@8d4dfdd)

Compiler

Ruby codegen: support generation of rbs files (#15633) (protocolbuffers/protobuf@6ebdf85)

Avoid collision name problems between a message named Xyz and a direct sibling enum named XyzView (protocolbuffers/protobuf@eba53e8)

Generalizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (protocolbuffers/protobuf@ed3c571)

Fix a bug with custom features outside of the pb package. (protocolbuffers/protobuf@872d3ce)

Fix import option handling when include_imports isn't set. (protocolbuffers/protobuf@9ef9e80)

Fix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (protocolbuffers/protobuf@1229d4a)

Prevent accidental stripping of debug_redact options via import option. (protocolbuffers/protobuf@f58b098)

C++

Add EnumerateEnumValues function. (protocolbuffers/protobuf@397d5d9)

... (truncated)

Commits

See full diff in compare view

Updates python-multipart from 0.0.21 to 0.0.22

Release notes

Sourced from python-multipart's releases.

Version 0.0.22

What's Changed

Drop directory path from filename in File 9433f4b.

Full Changelog: Kludex/python-multipart@0.0.21...0.0.22

Changelog

Sourced from python-multipart's changelog.

0.0.22 (2026-01-25)

Drop directory path from filename in File 9433f4b.

Commits

bea7bbb Version 0.0.22 (#222)
0fb59a9 chore: add return type on test (#221)
9433f4b Merge commit from fork
d5c91ec Bump the github-actions group with 2 updates (#219)
5a90631 bump uv (#218)
See full diff in compare view

Updates pyasn1 from 0.6.2 to 0.6.3

Release notes

Sourced from pyasn1's releases.

Release 0.6.3

It's a minor release.

Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (CVE-2026-30922).

Fixed OverflowError from oversized BER length field.

Fixed DeprecationWarning stacklevel for deprecated attributes.

Fixed asDateTime incorrect fractional seconds parsing.

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.3, released 16-03-2026

CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (thanks for reporting, romanticpragmatism)

Fixed OverflowError from oversized BER length field [issue #54](pyasn1/pyasn1#54) [pr #100](pyasn1/pyasn1#100)

Fixed DeprecationWarning stacklevel for deprecated attributes [issue #86](pyasn1/pyasn1#86) [pr #101](pyasn1/pyasn1#101)

Fixed asDateTime incorrect fractional seconds parsing [issue #81](pyasn1/pyasn1#81) [pr #102](pyasn1/pyasn1#102)

Commits

af65c3b Prepare release 0.6.3
5a49bd1 Merge commit from fork
5494ba4 Fix asDateTime incorrect fractional seconds parsing (#102)
71f486e Fix DeprecationWarning stacklevel for deprecated attributes (#101)
d7cb42d Fix OverflowError from oversized BER length field (#100)
See full diff in compare view

Updates orjson from 3.11.5 to 3.11.6

Release notes

Sourced from orjson's releases.

3.11.6

Changed

orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).

Drop support for Python 3.9.

ABI compatibility with CPython 3.15 alpha 5.

Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

Fix sporadic crash serializing deeply nested list of dict.

Changelog

Sourced from orjson's changelog.

3.11.6 - 2026-01-29

Changed

orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).

Drop support for Python 3.9.

ABI compatibility with CPython 3.15 alpha 5.

Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

Fix sporadic crash serializing deeply nested list of dict.

Commits

ec02024 3.11.6
d581687 build, clippy misc
4105b29 writer::num
62bb185 Fix sporadic crash on serializing object close
d860078 PyRef idiom refactors
343ae2f Deserializer, Utf8Buffer
7835f58 PyBytesRef and other input refactor
71e0516 PyStrRef
1096df4 MSRV 1.89
b718e75 Drop support for python3.9
Additional commits viewable in compare view

Updates cryptography from 46.0.3 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
See full diff in compare view

Updates protobuf from 6.33.4 to 6.33.5

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

This version includes breaking changes to: C++, Objective-C, PHP, Python.

[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

[C++] Make generator headers private (protocolbuffers/protobuf@3a2af35)

[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (protocolbuffers/protobuf@7a75898)

[C++] Add [[nodiscard]] to many APIs. (protocolbuffers/protobuf@a70115f)

[C++] Make the arena-enabled constructors of RepeatedField, RepeatedPtrField, and Map private. (protocolbuffers/protobuf@ef890c3)

[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a u...
Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the pip group with 3 updates in the /examples/agentsec/1-simple directory: [cryptography](https://github.com/pyca/cryptography), [python-multipart](https://github.com/Kludex/python-multipart) and [tornado](https://github.com/tornadoweb/tornado). Bumps the pip group with 5 updates in the /examples/agentsec/2-agent-frameworks/autogen-agent directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.5` | | [pillow](https://github.com/python-pillow/Pillow) | `12.1.0` | `12.1.1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.5` | `5.29.6` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.21` | `0.0.22` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.2` | `0.6.3` | Bumps the pip group with 6 updates in the /examples/agentsec/2-agent-frameworks/crewai-agent directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.5` | | [pillow](https://github.com/python-pillow/Pillow) | `12.1.0` | `12.1.1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.4` | `6.33.5` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.21` | `0.0.22` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.2` | `0.6.3` | | [orjson](https://github.com/ijl/orjson) | `3.11.5` | `3.11.6` | Bumps the pip group with 8 updates in the /examples/agentsec/2-agent-frameworks/langchain-agent directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.4` | `6.33.5` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.21` | `0.0.22` | | [tornado](https://github.com/tornadoweb/tornado) | `6.5.4` | `6.5.5` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.2` | `0.6.3` | | [orjson](https://github.com/ijl/orjson) | `3.11.5` | `3.11.6` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.7` | `1.2.11` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.0.6` | `1.0.10rc1` | Bumps the pip group with 7 updates in the /examples/agentsec/2-agent-frameworks/langgraph-agent directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.4` | `6.33.5` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.21` | `0.0.22` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.2` | `0.6.3` | | [orjson](https://github.com/ijl/orjson) | `3.11.5` | `3.11.6` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.7` | `1.2.11` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.0.7` | `1.0.10rc1` | Bumps the pip group with 3 updates in the /examples/agentsec/2-agent-frameworks/openai-agent directory: [cryptography](https://github.com/pyca/cryptography), [python-multipart](https://github.com/Kludex/python-multipart) and [tornado](https://github.com/tornadoweb/tornado). Bumps the pip group with 4 updates in the /examples/agentsec/2-agent-frameworks/strands-agent directory: [cryptography](https://github.com/pyca/cryptography), [protobuf](https://github.com/protocolbuffers/protobuf), [python-multipart](https://github.com/Kludex/python-multipart) and [pyasn1](https://github.com/pyasn1/pyasn1). Bumps the pip group with 3 updates in the /examples/agentsec/3-agent-runtimes/amazon-bedrock-agentcore directory: [cryptography](https://github.com/pyca/cryptography), [python-multipart](https://github.com/Kludex/python-multipart) and [tornado](https://github.com/tornadoweb/tornado). Bumps the pip group with 3 updates in the /examples/agentsec/3-agent-runtimes/gcp-vertex-ai-agent-engine directory: [tornado](https://github.com/tornadoweb/tornado), [pyasn1](https://github.com/pyasn1/pyasn1) and [langgraph](https://github.com/langchain-ai/langgraph). Bumps the pip group with 6 updates in the /examples/agentsec/3-agent-runtimes/microsoft-foundry directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.5` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.21` | `0.0.22` | | [orjson](https://github.com/ijl/orjson) | `3.11.5` | `3.11.6` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.7` | `1.2.11` | | [flask](https://github.com/pallets/flask) | `3.1.2` | `3.1.3` | | [werkzeug](https://github.com/pallets/werkzeug) | `3.1.5` | `3.1.6` | Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `tornado` from 6.5.4 to 6.5.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.4...v6.5.5) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `pillow` from 12.1.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.1.1) Updates `protobuf` from 5.29.5 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `pillow` from 12.1.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.1.1) Updates `protobuf` from 6.33.4 to 6.33.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `orjson` from 3.11.5 to 3.11.6 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.5...3.11.6) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `protobuf` from 6.33.4 to 6.33.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `tornado` from 6.5.4 to 6.5.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.4...v6.5.5) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `orjson` from 3.11.5 to 3.11.6 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.5...3.11.6) Updates `langchain-core` from 1.2.7 to 1.2.11 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.2.11) Updates `langgraph` from 1.0.6 to 1.0.10rc1 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.0.6...1.0.10rc1) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `protobuf` from 6.33.4 to 6.33.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `orjson` from 3.11.5 to 3.11.6 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.5...3.11.6) Updates `langchain-core` from 1.2.7 to 1.2.11 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.2.11) Updates `langgraph` from 1.0.7 to 1.0.10rc1 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.0.6...1.0.10rc1) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `tornado` from 6.5.4 to 6.5.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.4...v6.5.5) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `protobuf` from 6.33.4 to 6.33.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `tornado` from 6.5.4 to 6.5.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.4...v6.5.5) Updates `tornado` from 6.5.4 to 6.5.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.4...v6.5.5) Updates `pyasn1` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) Updates `langgraph` from 1.0.8 to 1.0.10rc1 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.0.6...1.0.10rc1) Updates `cryptography` from 46.0.3 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.3...46.0.5) Updates `python-multipart` from 0.0.21 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.21...0.0.22) Updates `orjson` from 3.11.5 to 3.11.6 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.5...3.11.6) Updates `langchain-core` from 1.2.7 to 1.2.11 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.2.11) Updates `flask` from 3.1.2 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@3.1.2...3.1.3) Updates `werkzeug` from 3.1.5 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.5...3.1.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: tornado dependency-version: 6.5.5 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: pillow dependency-version: 12.1.1 dependency-type: indirect dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: pillow dependency-version: 12.1.1 dependency-type: indirect dependency-group: pip - dependency-name: protobuf dependency-version: 6.33.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: orjson dependency-version: 3.11.6 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: protobuf dependency-version: 6.33.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: tornado dependency-version: 6.5.5 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: orjson dependency-version: 3.11.6 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.2.11 dependency-type: direct:production dependency-group: pip - dependency-name: langgraph dependency-version: 1.0.10rc1 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: protobuf dependency-version: 6.33.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: orjson dependency-version: 3.11.6 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.2.11 dependency-type: direct:production dependency-group: pip - dependency-name: langgraph dependency-version: 1.0.10rc1 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: tornado dependency-version: 6.5.5 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: protobuf dependency-version: 6.33.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: tornado dependency-version: 6.5.5 dependency-type: indirect dependency-group: pip - dependency-name: tornado dependency-version: 6.5.5 dependency-type: indirect dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: pip - dependency-name: langgraph dependency-version: 1.0.10rc1 dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: indirect dependency-group: pip - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: pip - dependency-name: orjson dependency-version: 3.11.6 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.2.11 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-25T12:54:52Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-03-26T13:15:40Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-03-26T15:56:18Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-03-31T08:10:45Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 17, 2026

dependabot Bot mentioned this pull request Mar 17, 2026

chore(deps): Bump the pip group across 10 directories with 10 updates #78

Closed

shiva-guntoju-09 mentioned this pull request Mar 25, 2026

chore(deps): security updates across 10 example directories #89

Merged

3 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the pip group across 10 directories with 11 updates#79

chore(deps): Bump the pip group across 10 directories with 11 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/examples/agentsec/1-simple/pip-d4ae2943c4

dependabot Bot commented on behalf of github Mar 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Mar 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.0.22

What's Changed

0.0.22 (2026-01-25)

Release notes

12.1.1

Dependencies

Other changes

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

Version 0.0.22

What's Changed

0.0.22 (2026-01-25)

Release 0.6.3

Revision 0.6.3, released 16-03-2026

12.1.1

Dependencies

Other changes

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

Version 0.0.22

What's Changed

0.0.22 (2026-01-25)

Release 0.6.3

Revision 0.6.3, released 16-03-2026

3.11.6

Changed

Fixed

3.11.6 - 2026-01-29

Changed

Fixed

Protocol Buffers v34.0-rc1

Announcements

Uh oh!

dependabot Bot commented on behalf of github Mar 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Mar 17, 2026 •

edited

Loading