[6d7fb817] chore(deps): upgrade pydantic-settings from 2.14.1 to 2.14.2 to fix GHSA-4xgf-cpjx-pc3j (#238) (#240) (#241)

- Add pydantic-settings>=2.14.2 constraint in pyproject.toml
- Regenerate uv.lock: pydantic_settings-2.14.1 -> pydantic_settings-2.14.2
- Fix pre-existing xenon CC=12 in _fetch_latest_ci_run (self-heal CI signal
  commit introduced the complexity): extract HTTP retry loop into
  _get_ci_runs_response helper, bringing both methods to rank B

All acceptance criteria verified: uv.lock shows 2.14.2, pip-audit
--ignore-vuln CVE-2025-3000 exits 0 with no GHSA-4xgf-cpjx-pc3j mention,
make gate (ruff/mypy/xenon) exits 0, no GHSA suppression in Makefile or
pyproject.toml.

Co-authored-by: Backend Developer 1 <be-dev-1@agents.roboco.dev>
This commit is contained in:
Renzo F
2026-06-20 20:25:08 +02:00
committed by GitHub
co-authored by Backend Developer 1
parent af5adf8c03
commit 028b49161b
3 changed files with 43 additions and 32 deletions
+1 -1
View File
@@ -12,7 +12,7 @@ requires-python = ">=3.10,<3.15"
dependencies = [
# Core
"pydantic",
"pydantic-settings",
"pydantic-settings>=2.14.2",
# API
"fastapi",
"uvicorn[standard]",