Merge pull request #2526 from Molecule-AI/dependabot/pip/workspace/python-multipart-gte-0.0.27

chore(deps)(deps): update python-multipart requirement from >=0.0.18 to >=0.0.27 in /workspace
This commit is contained in:
Hongming Wang 2026-05-03 01:25:25 +00:00 committed by GitHub
commit 8dc07b46dd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -17,7 +17,7 @@ websockets>=16.0
# multipart/form-data parser — required for Starlette's Request.form() on
# /internal/chat/uploads/ingest. Pinned ≥ 0.0.18 because earlier versions
# had a CVE-2024-53981 (DoS via malformed boundary).
python-multipart>=0.0.18
python-multipart>=0.0.27
# Config parsing
pyyaml>=6.0.3