Guobin Yue
df28036a68
fix(deps): resolve 3 security vulnerabilities (CVE-2025-71176, CVE-2026-40347, CVE-2018-25031) ( #2671 )
...
* fix(deps): upgrade pytest to 9.0.3 to fix CVE-2025-71176
CVE-2025-71176: pytest 9.0.2 and earlier versions have a local
security vulnerability due to predictable temporary directory naming.
- pytest: 8.4.2 → 9.0.3
- Python 3.10+ is now required
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix(deps): upgrade python-multipart to 0.0.26 to fix CVE-2026-40347
CVE-2026-40347: python-multipart < 0.0.26 has a denial of
service vulnerability when parsing multipart data.
- python-multipart: 0.0.22 → 0.0.26
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix(deps): upgrade swagger-ui to 4.1.3 to fix CVE-2018-25031
CVE-2018-25031: swagger-ui < 4.1.3 has a spoofing vulnerability
where remote attackers can display remote OpenAPI definitions
via crafted URLs.
- swagger-ui: 3.30.0 → 4.1.3
- Updated swagger-ui-bundle.js and swagger-ui.css
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix(api): change FastAPI version from "v3" to "3.0.0" for Swagger UI 4.1.3 compatibility
Swagger UI 4.x enforces stricter version format validation.
The version "v3" is not accepted by the new validator.
Changed from:
- version="v3"
To:
- version="3.0.0"
This affects both controller and compute API definitions.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix(deps): upgrade swagger-ui to 5.32.4
Fixes "Unable to render this definition" error when loading OpenAPI 3.0
docs. Swagger UI 3.x had incomplete OpenAPI 3.0 support.
- swagger-ui: 3.19.1 → 5.32.4 (latest)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 00:35:15 +08:00
grossmj
38ebaaa90a
Remove requests dependency from dev-requirements.txt
2026-03-31 17:30:41 +08:00
grossmj
4c6d40fd4b
Upgrade httpx_ws
2026-02-25 19:20:18 +08:00
grossmj
4a2c1b7b23
Fix installing pytest-asyncio with Python 3.9
2026-02-25 19:06:56 +08:00
grossmj
47a7324eb5
Fix tests
2026-02-25 19:00:57 +08:00
grossmj
74bc3b5144
Upgrade dependencies
2026-02-11 18:11:16 +08:00
grossmj
aabfd08524
Merge remote-tracking branch 'origin/2.2' into 3.0
...
# Conflicts:
# CHANGELOG
# dev-requirements.txt
# gns3server/crash_report.py
# gns3server/version.py
# requirements.txt
2026-02-11 17:52:14 +08:00
grossmj
dd87ccff4d
Upgrade pytest and jsonschema dependencies
2026-02-11 17:38:49 +08:00
grossmj
abaeab6242
Upgrade greenlet and sqlalchemy dependencies
2026-01-26 19:50:42 +08:00
grossmj
1d45df6613
Upgrade dependencies
2026-01-24 21:38:58 +08:00
grossmj
69a695c9e6
Merge branch '2.2' into 3.0
...
# Conflicts:
# dev-requirements.txt
# gns3server/appliances/infix.gns3a
# gns3server/crash_report.py
# gns3server/run.py
# gns3server/utils/asyncio/__init__.py
# gns3server/version.py
# requirements.txt
# setup.py
2026-01-24 19:27:39 +08:00
grossmj
193f470eaf
Upgrade dependencies
2026-01-24 19:12:58 +08:00
grossmj
1ed549fdb1
Upgrade requests dev dependency
2025-08-29 14:01:19 +02:00
grossmj
ba4e0c945d
Refactor tests and upgrade dev package requirements
2025-01-17 19:12:44 +10:00
grossmj
345ecb7630
Upgrade dev dependencies
2024-10-31 20:49:12 +10:00
grossmj
c4fcb43e78
Merge branch '2.2' into 3.0
...
# Conflicts:
# .github/workflows/testing.yml
# CHANGELOG
# README.md
# dev-requirements.txt
# gns3server/compute/docker/docker_vm.py
# gns3server/controller/export_project.py
# gns3server/controller/import_project.py
# gns3server/controller/project.py
# gns3server/crash_report.py
# gns3server/static/web-ui/index.html
# gns3server/static/web-ui/main.df8c319a3da6fb0e3629.js
# gns3server/version.py
# requirements.txt
# setup.py
# tests/compute/docker/test_docker_vm.py
# tests/controller/test_import_project.py
2024-10-31 12:54:35 +10:00
grossmj
c273a78560
Upgrade pytest to v8.3.3
2024-10-19 16:33:54 +10:00
grossmj
9046c60811
Fix tests by downgrading pytest-asyncio
2024-08-03 13:15:36 +02:00
grossmj
24cace8122
Merge remote-tracking branch 'origin/2.2' into 3.0
...
# Conflicts:
# dev-requirements.txt
# requirements.txt
# setup.py
2024-08-03 12:58:19 +02:00
grossmj
6746ef39be
Upgrade development packages
2024-08-03 12:32:43 +02:00
grossmj
45a0644371
Upgrade request and sqlalchemy packages
2024-07-03 19:05:05 +02:00
grossmj
7030dadbcb
Remove dev requirements for Python 3.6
2024-05-09 18:04:19 +07:00
grossmj
fd60bda2c2
Downgrade pytest-asyncio to v0.21.1
2024-04-02 13:28:18 +07:00
grossmj
16bad6e0b5
Downgrade httpx_ws to v0.4.2
2024-03-24 18:37:31 +01:00
grossmj
8e661df981
Upgrade dev packages
2024-03-24 18:31:56 +01:00
Jeremy Grossmann
a55e1cbc99
Update dev-requirements.txt
2023-10-22 15:47:21 +10:00
Jeremy Grossmann
9c369a2597
Merge branch '3.0' into fix/1468
2023-10-22 15:44:25 +10:00
grossmj
0f0412158d
Drop support for Python 3.7 and upgrade dependencies
2023-10-22 15:37:00 +10:00
grossmj
2f3689588e
Fix httpx-ws dependency on Python 3.7
2023-10-22 12:53:47 +10:00
grossmj
44c066ac68
Fix compute authentication for websocket endpoints
2023-10-22 12:44:39 +10:00
grossmj
1cb433c5bc
New packaging relying only pyproject.toml
2023-08-10 22:44:37 +10:00
grossmj
2991899d50
Upgrade dependencies
2023-07-23 12:47:34 +10:00
grossmj
bfb317a302
Upgrade dependencies
2023-06-30 17:47:55 +10:00
grossmj
a7a946c067
Upgrade dev dependencies
2023-06-20 16:17:13 +09:30
grossmj
af2b5c3448
Upgrade dependencies
2023-04-30 23:17:01 -10:00
grossmj
1591ca114d
Upgrade dependencies
2023-04-23 05:33:12 -10:00
grossmj
c33a13fd45
Upgrade dependencies
2023-03-17 16:23:48 +10:00
grossmj
84f256dd88
Downgrade to flake8 v5.0.4
2022-12-22 09:46:11 +08:00
grossmj
1bbecf1ceb
Update dependencies
2022-12-22 09:42:14 +08:00
grossmj
263febecbc
Merge branch '2.2' into 3.0
...
# Conflicts:
# .github/workflows/testing.yml
# CHANGELOG
# appveyor.yml
# dev-requirements.txt
# gns3server/compute/base_node.py
# gns3server/controller/__init__.py
# gns3server/controller/appliance_manager.py
# gns3server/crash_report.py
# gns3server/static/web-ui/index.html
# gns3server/utils/get_resource.py
# gns3server/version.py
# gns3server/web/route.py
# requirements.txt
# tests/handlers/api/compute/test_qemu.py
# win-requirements.txt
2022-11-09 20:30:28 +08:00
grossmj
ece47dc279
Upgrade dependencies
2022-11-07 21:48:45 +08:00
grossmj
78b2b93540
Update dev-requirements.txt
2022-10-11 23:23:15 +08:00
grossmj
fc7d5be736
Use pytest-asyncio auto mode
2022-08-27 21:10:17 +02:00
grossmj
852de03d43
Install latest dev dependencies for Python >= 3.7
2022-08-27 20:40:35 +02:00
grossmj
470e6cb901
Add pytest-asyncio 0.19.0
2022-08-27 19:41:46 +02:00
grossmj
e8273fb19e
Downgrade to pytest-aiohttp v0.3.0
2022-08-27 19:39:02 +02:00
grossmj
4b3d6572d4
Downgrade to pytest v7.0.1 (last version to support
2022-08-27 19:35:36 +02:00
grossmj
d1c8f33fc5
Upgrade dev dependencies and fix issues after upgrading to pytest-aiohttp v1.0.4
2022-08-27 19:16:02 +02:00
grossmj
86c44cd6e7
Upgrade dev dependencies and fix tests to support pytest-asyncio strict mode
2022-08-24 21:03:16 +02:00
grossmj
f8a83e7ff9
Merge branch '2.2' into 3.0
...
# Conflicts:
# dev-requirements.txt
# gns3server/compute/qemu/qemu_vm.py
# gns3server/version.py
# requirements.txt
2022-03-13 14:50:02 +10:30
