mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-08-27 12:30:13 +03:00
df28036a68
* fix(deps): upgrade pytest to 9.0.3 to fix CVE-2025-71176 CVE-2025-71176: pytest 9.0.2 and earlier versions have a local security vulnerability due to predictable temporary directory naming. - pytest: 8.4.2 → 9.0.3 - Python 3.10+ is now required Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(deps): upgrade python-multipart to 0.0.26 to fix CVE-2026-40347 CVE-2026-40347: python-multipart < 0.0.26 has a denial of service vulnerability when parsing multipart data. - python-multipart: 0.0.22 → 0.0.26 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(deps): upgrade swagger-ui to 4.1.3 to fix CVE-2018-25031 CVE-2018-25031: swagger-ui < 4.1.3 has a spoofing vulnerability where remote attackers can display remote OpenAPI definitions via crafted URLs. - swagger-ui: 3.30.0 → 4.1.3 - Updated swagger-ui-bundle.js and swagger-ui.css Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(api): change FastAPI version from "v3" to "3.0.0" for Swagger UI 4.1.3 compatibility Swagger UI 4.x enforces stricter version format validation. The version "v3" is not accepted by the new validator. Changed from: - version="v3" To: - version="3.0.0" This affects both controller and compute API definitions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(deps): upgrade swagger-ui to 5.32.4 Fixes "Unable to render this definition" error when loading OpenAPI 3.0 docs. Swagger UI 3.x had incomplete OpenAPI 3.0 support. - swagger-ui: 3.19.1 → 5.32.4 (latest) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
44 lines
1.4 KiB
Plaintext
44 lines
1.4 KiB
Plaintext
# GNS3 Server Core Dependencies
|
|
uvicorn==0.41.0
|
|
pydantic==2.12.5
|
|
fastapi==0.135.2
|
|
python-multipart==0.0.26 # fix CVE-2026-40347
|
|
websockets==16.0
|
|
aiohttp>=3.13.3,<3.14
|
|
aiofiles>=25.1.0,<26.0
|
|
Jinja2>=3.1.6,<3.2
|
|
sentry-sdk>=2.54.0,<3 # optional dependency
|
|
psutil>=7.2.2
|
|
async-timeout>=5.0.1,<5.1; python_version < '3.11' # this library has effectively been upstreamed into Python 3.11+
|
|
distro>=1.9.0
|
|
py-cpuinfo>=9.0.0,<10.0
|
|
greenlet==3.3.2; python_version >= '3.13' # necessary to run sqlalchemy on Python >= 3.13
|
|
sqlalchemy==2.0.48
|
|
aiosqlite==0.22.1
|
|
alembic==1.15.2
|
|
bcrypt==5.0.0
|
|
joserfc==1.6.3
|
|
email-validator==2.3.0
|
|
watchdog==6.0.0
|
|
zstandard==0.25.0
|
|
platformdirs>=2.4.0,<3 # platformdirs >=3 conflicts when building Debian packages
|
|
truststore>=0.10.4; python_version >= '3.10'
|
|
|
|
# Shared dependencies (also used by AI Copilot)
|
|
telnetlib3==4.0.1
|
|
typing-extensions>=4.15.0
|
|
requests>=2.33.1
|
|
urllib3>=2.6.2
|
|
|
|
# ==============================================================================
|
|
# AI Copilot Optional Dependencies
|
|
# ==============================================================================
|
|
# AI Copilot features are now optional. Install with:
|
|
# pip install gns3-server[ai-copilot]
|
|
# Or:
|
|
# pip install -r ai-requirements.txt
|
|
#
|
|
# This reduces installation size and supports restricted environments where
|
|
# AI dependencies may not be allowed.
|
|
# ==============================================================================
|