mirror of
https://github.com/allaunthefox/SilverSight.git
synced 2026-07-31 01:25:21 +00:00
eba0528728
- Pin h11>=0.16.0 in requirements.txt (fixes malformed Chunked-Encoding) - Remove h11 from dependabot ignore list so it tracks future updates CVE-2025-43859: h11 accepted some malformed Chunked-Encoding bodies. Fixed in h11 0.16.0. Added as explicit dependency to ensure safe version.
30 lines
684 B
YAML
30 lines
684 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 5
|
|
ignore:
|
|
- dependency-name: "opentelemetry*"
|
|
- dependency-name: "thrift"
|
|
- dependency-name: "glib*"
|
|
- dependency-name: "ml-dsa"
|
|
- dependency-name: "rand"
|
|
- dependency-name: "time"
|
|
|
|
- package-ecosystem: "cargo"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
open-pull-requests-limit: 0
|
|
ignore:
|
|
- dependency-name: "*"
|
|
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
open-pull-requests-limit: 0
|
|
ignore:
|
|
- dependency-name: "*"
|