Merge branch '3.0' into fix/swagger-ui-cve-2018-25031

dev-requirements.txt

@@ -1,4 +1,4 @@
-pytest==8.4.2  # version 8.4.2 is the last one supporting Python 3.9
+pytest==9.0.3  # fix CVE-2025-71176; Python 3.10+ required
 flake8==7.3.0
 pytest-timeout==2.4.0
 pytest-asyncio==1.2.0; python_version == '3.9' # version 1.2.0 is the last one supporting Python 3.9

gns3server/api/routes/compute/__init__.py

@@ -59,7 +59,7 @@ log = logging.getLogger(__name__)
 compute_api = FastAPI(
     title="GNS3 compute API",
     description="This page describes the private compute API for GNS3. PLEASE DO NOT USE DIRECTLY!",
-    version="v3",
+    version="3.0.0",
 )
 
 compute_api.state.controller_host = None

gns3server/api/server.py

@@ -58,7 +58,7 @@ def get_application() -> FastAPI:
         lifespan=tasks.lifespan,
         title="GNS3 controller API",
         description="This page describes the public controller API for GNS3",
-        version="v3",
+        version="3.0.0",
         docs_url=None,
         redoc_url=None
     )

requirements.txt

@@ -2,7 +2,7 @@
 uvicorn==0.41.0
 pydantic==2.12.5
 fastapi==0.135.2
-python-multipart==0.0.22
+python-multipart==0.0.26  # fix CVE-2026-40347
 websockets==16.0
 aiohttp>=3.13.3,<3.14
 aiofiles>=25.1.0,<26.0