From 2a540fc2d283138eb9a5c21e2e00b97a77aedc1f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 17 Oct 2026 10:57:53 +0000 Subject: [PATCH] build(deps): bump the pip group across 2 directories with 1 update Bumps the pip group with 1 update in the / directory: [mako](https://github.com/sqlalchemy/mako). Bumps the pip group with 1 update in the /requirements directory: [mako](https://github.com/sqlalchemy/mako). Updates `mako` from 1.3.12 to 1.4.2 - [Release notes](https://github.com/sqlalchemy/mako/releases) - [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/mako/commits) Updates `mako` from 1.3.12 to 1.4.2 - [Release notes](https://github.com/sqlalchemy/mako/releases) - [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/mako/commits) --- updated-dependencies: - dependency-name: mako dependency-version: 1.4.2 dependency-type: direct:production dependency-group: pip - dependency-name: mako dependency-version: 1.4.2 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- carbonserver/pyproject.toml | 2 +- requirements/requirements-api.txt | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/carbonserver/pyproject.toml b/carbonserver/pyproject.toml index 78eb36ca5..a0fde0940 100644 --- a/carbonserver/pyproject.toml +++ b/carbonserver/pyproject.toml @@ -40,7 +40,7 @@ dependencies = [ "joserfc>=1.0.0", "itsdangerous>=2.2.0", # Alembic depends on Mako but does not currently require the CVE-fixed version. - "mako>=1.3.12", + "mako>=1.4.3", ] [project.optional-dependencies] diff --git a/requirements/requirements-api.txt b/requirements/requirements-api.txt index 44e1f561d..00ffe403a 100644 --- a/requirements/requirements-api.txt +++ b/requirements/requirements-api.txt @@ -546,9 +546,9 @@ joserfc==1.7.0 \ # via # carbonserver (carbonserver/pyproject.toml) # authlib -mako==1.3.12 \ - --hash=sha256:8f61569480282dbf557145ce441e4ba888be453c30989f879f0d652e39f53ea9 \ - --hash=sha256:9f778e93289bd410bb35daadeb4fc66d95a746f0b75777b942088b7fd7af550a +mako==1.4.2 \ + --hash=sha256:7227a060ee3af55a493af61d73d6beef13044b81dba9586736c13945f09464ce \ + --hash=sha256:e70a2a4308952b33a21208bfd6725da79fae5a8c224578f8cfdeb60e5ace03df # via # carbonserver (carbonserver/pyproject.toml) # alembic