611a1d69c3
aiohttp 3.14.1→3.14.3 (CVE-2026-69244 client C-parser OOB heap read — the reachable one, client-only usage via s3fs/gcsfs/aiobotocore; CVE-2026-59881/-69243 are server-side WS paths, no aiohttp server here) pyasn1 0.6.3→0.6.4 (CVE-2026-59884/-59885/-59886 quadratic-decode DoS — no direct untrusted ASN.1 decoding; transitive via google-auth/rsa) cryptography 49.0.0→50.0.0 (CVE-2026-69247 PKCS7 decrypt padding oracle — no EnvelopedData decryption paths; direct dep, pyproject floor raised) Per-issue exploitability rationale in tracker issues #581-#587. Full suite green with bumped packages installed: 14023 passed (serial proof run 26m45s at ecc3bae-era tree; parallel hook run 13m58s). pkg-manifest regenerated.
669 lines
14 KiB
JSON
669 lines
14 KiB
JSON
{
|
|
"apt": {
|
|
"infra/images/selkies/Dockerfile.upstream": [
|
|
"\"./virtualgl32_${VIRTUALGL_VERSION}_amd64.deb\"",
|
|
"\"./virtualgl_${VIRTUALGL_VERSION}_amd64.deb\"",
|
|
"./google-chrome-stable.deb",
|
|
"./heroic_launcher.deb",
|
|
"./kasmvncserver.deb",
|
|
"./lutris.deb",
|
|
"./rustdesk.deb",
|
|
"./selkies-js-interposer.deb",
|
|
"./virtualgl_${VIRTUALGL_VERSION}_arm64.deb",
|
|
"GStreamer",
|
|
"Operating",
|
|
"adwaita-icon-theme-full",
|
|
"aom-tools",
|
|
"appmenu-gtk3-module",
|
|
"apt-utils",
|
|
"ark",
|
|
"aspell",
|
|
"aspell-en",
|
|
"breeze",
|
|
"breeze-cursor-theme",
|
|
"breeze-gtk-theme",
|
|
"breeze-icon-theme",
|
|
"dbus-user-session",
|
|
"dbus-x11",
|
|
"debconf-kde-helper",
|
|
"dependencies",
|
|
"desktop-file-utils",
|
|
"dolphin",
|
|
"dolphin-plugins",
|
|
"enchant-2",
|
|
"fakeroot",
|
|
"fcitx",
|
|
"fcitx-frontend-gtk2",
|
|
"fcitx-frontend-gtk3",
|
|
"fcitx-frontend-qt5",
|
|
"fcitx-hangul",
|
|
"fcitx-libpinyin",
|
|
"fcitx-m17n",
|
|
"fcitx-module-dbus",
|
|
"fcitx-module-kimpanel",
|
|
"fcitx-module-lua",
|
|
"fcitx-module-x11",
|
|
"fcitx-mozc",
|
|
"fcitx-sayura",
|
|
"fcitx-tools",
|
|
"fcitx-unikey",
|
|
"filelight",
|
|
"firefox",
|
|
"frameworkintegration",
|
|
"fuse",
|
|
"gir1.2-wp-0.5",
|
|
"gstreamer1.0-libcamera",
|
|
"gstreamer1.0-pipewire",
|
|
"gstreamer1.0-plugins-bad",
|
|
"gwenview",
|
|
"haveged",
|
|
"hunspell",
|
|
"i965-va-driver-shaders",
|
|
"i965-va-driver-shaders:i386",
|
|
"im-config",
|
|
"intel-gpu-tools",
|
|
"intel-media-va-driver-non-free",
|
|
"intel-media-va-driver-non-free:i386",
|
|
"kcalc",
|
|
"kcharselect",
|
|
"kde-baseapps",
|
|
"kde-config-fcitx",
|
|
"kde-config-gtk-style",
|
|
"kde-config-gtk-style-preview",
|
|
"kde-spectacle",
|
|
"kdeadmin",
|
|
"kdeconnect",
|
|
"kdegraphics-thumbnailers",
|
|
"kdf",
|
|
"kdialog",
|
|
"kfind",
|
|
"kget",
|
|
"khotkeys",
|
|
"kimageformat-plugins",
|
|
"kinfocenter",
|
|
"kio",
|
|
"kio-extras",
|
|
"kmag",
|
|
"kmenuedit",
|
|
"kmix",
|
|
"kmod",
|
|
"kmousetool",
|
|
"kmouth",
|
|
"ksshaskpass",
|
|
"ktimer",
|
|
"kwin-addons",
|
|
"kwin-x11",
|
|
"kwrite",
|
|
"libc6:i386",
|
|
"libdatetime-perl",
|
|
"libdbusmenu-glib4",
|
|
"libdbusmenu-gtk3-4",
|
|
"libdrm2:i386",
|
|
"libegl-dev",
|
|
"libegl1:i386",
|
|
"libffmpeg-nvenc-dev",
|
|
"libgail-common",
|
|
"libgdk-pixbuf2.0-bin",
|
|
"libgl1:i386",
|
|
"libgles1:i386",
|
|
"libgles2:i386",
|
|
"libglu1:i386",
|
|
"libglvnd0:i386",
|
|
"libglx0:i386",
|
|
"libgstreamer-plugins-bad1.0-dev",
|
|
"libgtk-3-bin",
|
|
"libgtk2.0-bin",
|
|
"libkf5baloowidgets-bin",
|
|
"libkf5dbusaddons-bin",
|
|
"libkf5iconthemes-bin",
|
|
"libkf5kdelibs4support5-bin",
|
|
"libkf5khtml-bin",
|
|
"libkf5parts-plugins",
|
|
"libopengl0:i386",
|
|
"libopenh264-dev",
|
|
"libpipewire-0.3-modules",
|
|
"libpipewire-module-x11-bell",
|
|
"libqt5multimedia5-plugins",
|
|
"libreoffice",
|
|
"libreoffice-kf5",
|
|
"libreoffice-plasma",
|
|
"libreoffice-style-breeze",
|
|
"librsvg2-common",
|
|
"libsm6:i386",
|
|
"libspa-0.2-bluetooth",
|
|
"libspa-0.2-jack",
|
|
"libspa-0.2-modules",
|
|
"libva-dev",
|
|
"libva2:i386",
|
|
"libvulkan-dev:i386",
|
|
"libx11-6:i386",
|
|
"libxau6:i386",
|
|
"libxcb1:i386",
|
|
"libxdmcp6:i386",
|
|
"libxext6:i386",
|
|
"libxtst6:i386",
|
|
"libxv1:i386",
|
|
"locales",
|
|
"media-player-info",
|
|
"mesa-utils-extra",
|
|
"mesa-vulkan-drivers:i386",
|
|
"meson",
|
|
"nvtop",
|
|
"okular",
|
|
"okular-extra-backends",
|
|
"packages",
|
|
"pipewire",
|
|
"pipewire-alsa",
|
|
"pipewire-audio-client-libraries",
|
|
"pipewire-jack",
|
|
"pipewire-libcamera",
|
|
"pipewire-locales",
|
|
"pipewire-v4l2",
|
|
"pipewire-vulkan",
|
|
"plasma-browser-integration",
|
|
"plasma-calendar-addons",
|
|
"plasma-dataengines-addons",
|
|
"plasma-desktop",
|
|
"plasma-discover",
|
|
"plasma-integration",
|
|
"plasma-runners-addons",
|
|
"plasma-widgets-addons",
|
|
"plasma-workspace",
|
|
"playonlinux",
|
|
"print-manager",
|
|
"q4wine",
|
|
"qapt-deb-installer",
|
|
"qml-module-org-kde-qqc2desktopstyle",
|
|
"qml-module-org-kde-runnermodel",
|
|
"qml-module-qt-labs-platform",
|
|
"qml-module-qtgraphicaleffects",
|
|
"qml-module-qtquick-xmllistmodel",
|
|
"qt5-gtk-platformtheme",
|
|
"qt5-image-formats-plugins",
|
|
"qt5-style-plugins",
|
|
"qtspeech5-flite-plugin",
|
|
"qtvirtualkeyboard-plugin",
|
|
"software-properties-qt",
|
|
"sonnet-plugins",
|
|
"ssl-cert",
|
|
"sudo",
|
|
"svt-av1",
|
|
"sweeper",
|
|
"system",
|
|
"systemsettings",
|
|
"transmission-qt",
|
|
"tzdata",
|
|
"ubuntu-drivers-common",
|
|
"udev",
|
|
"va-driver-all",
|
|
"va-driver-all:i386",
|
|
"vdpau-driver-all:i386",
|
|
"vlc",
|
|
"vlc-plugin-access-extra",
|
|
"vlc-plugin-notify",
|
|
"vlc-plugin-samba",
|
|
"vlc-plugin-skins2",
|
|
"vlc-plugin-video-splitter",
|
|
"vlc-plugin-visualization",
|
|
"winehq-${WINE_BRANCH}",
|
|
"wireplumber",
|
|
"wireplumber-locales",
|
|
"xcvt",
|
|
"xdg-user-dirs",
|
|
"xdg-utils",
|
|
"xvfb"
|
|
]
|
|
},
|
|
"apk": {
|
|
"infra/gitea/Dockerfile": [
|
|
"bash",
|
|
"build-base",
|
|
"ca-certificates",
|
|
"curl",
|
|
"dumb-init",
|
|
"gettext",
|
|
"git",
|
|
"gnupg",
|
|
"nodejs",
|
|
"npm",
|
|
"openssh-keygen"
|
|
]
|
|
},
|
|
"pypi": {
|
|
"project_prod": [
|
|
{
|
|
"name": "pydantic",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pymupdf",
|
|
"version": ">=1.24",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "python-docx",
|
|
"version": ">=1.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "xlrd",
|
|
"version": ">=2.0.2",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydantic",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "duckdb",
|
|
"version": ">=1.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "sqlglot",
|
|
"version": ">=26.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pyarrow",
|
|
"version": ">=23.0.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "duckdb",
|
|
"version": ">=1.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "fastapi",
|
|
"version": ">=0.139.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "uvicorn",
|
|
"version": ">=0.41.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pyjwt",
|
|
"version": ">=2.13.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "cryptography",
|
|
"version": ">=50.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "fsspec",
|
|
"version": ">=2024.1.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pyarrow",
|
|
"version": ">=23.0.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydantic",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "markdown-it-py",
|
|
"version": ">=4.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "mdit-py-plugins",
|
|
"version": ">=0.4",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "fastapi",
|
|
"version": ">=0.139.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "uvicorn",
|
|
"version": ">=0.41.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "langchain-core",
|
|
"version": ">=0.3.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "langchain-ollama",
|
|
"version": ">=0.2.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "langchain-postgres",
|
|
"version": ">=0.0.12",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "psycopg",
|
|
"version": ">=3.2.0",
|
|
"extras": "binary"
|
|
},
|
|
{
|
|
"name": "sqlalchemy",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydantic",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "typer",
|
|
"version": ">=0.24.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "uvicorn",
|
|
"version": ">=0.41.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydo",
|
|
"version": ">=0.29.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "resend",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydantic",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "duckdb",
|
|
"version": ">=1.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "duckdb",
|
|
"version": ">=1.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "duckdb",
|
|
"version": ">=1.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "typer",
|
|
"version": ">=0.24.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "narwhals",
|
|
"version": ">=2.17.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pyarrow",
|
|
"version": ">=23.0.1",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "fsspec",
|
|
"version": ">=2024.1.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "anthropic",
|
|
"version": ">=0.40.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "httpx",
|
|
"version": ">=0.28.1",
|
|
"extras": "socks"
|
|
},
|
|
{
|
|
"name": "pyyaml",
|
|
"version": ">=6.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pydo",
|
|
"version": ">=0.29.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "pdfminer",
|
|
"version": ".six>=20221105",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "resend",
|
|
"version": ">=2.0.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-api",
|
|
"version": ">=1.25.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-sdk",
|
|
"version": ">=1.25.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-exporter-otlp-proto-grpc",
|
|
"version": ">=1.25.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-exporter-prometheus",
|
|
"version": ">=0.46b0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-instrumentation-fastapi",
|
|
"version": ">=0.46b0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "opentelemetry-semantic-conventions",
|
|
"version": ">=0.46b0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "psutil",
|
|
"version": ">=5.9.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "coverage",
|
|
"version": ">=7.13.4",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "databricks-sdk",
|
|
"version": ">=0.85.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "databricks-bundles",
|
|
"version": ">=0.295.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "boto3",
|
|
"version": ">=1.35.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "s3fs",
|
|
"version": ">=2026.2.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "google-cloud-storage",
|
|
"version": ">=2.18.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "gcsfs",
|
|
"version": ">=2024.1.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "azure-storage-blob",
|
|
"version": ">=12.23.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "adlfs",
|
|
"version": ">=2024.1.0",
|
|
"extras": ""
|
|
},
|
|
{
|
|
"name": "uv-build",
|
|
"version": ">=0.7,<1",
|
|
"extras": ""
|
|
}
|
|
],
|
|
"project_dev": [],
|
|
"notebook": [],
|
|
"dockerfile_adhoc": []
|
|
},
|
|
"npm": [
|
|
{
|
|
"name": "@docusaurus/core",
|
|
"version": "^3.7.0"
|
|
},
|
|
{
|
|
"name": "@docusaurus/preset-classic",
|
|
"version": "^3.7.0"
|
|
},
|
|
{
|
|
"name": "@easyops-cn/docusaurus-search-local",
|
|
"version": "^0.55.1"
|
|
},
|
|
{
|
|
"name": "@mdx-js/react",
|
|
"version": "^3.0.0"
|
|
},
|
|
{
|
|
"name": "clsx",
|
|
"version": "^2.0.0"
|
|
},
|
|
{
|
|
"name": "prism-react-renderer",
|
|
"version": "^2.3.0"
|
|
},
|
|
{
|
|
"name": "react",
|
|
"version": "^18.0.0"
|
|
},
|
|
{
|
|
"name": "react-dom",
|
|
"version": "^18.0.0"
|
|
},
|
|
{
|
|
"name": "@docusaurus/module-type-aliases",
|
|
"version": "^3.7.0"
|
|
},
|
|
{
|
|
"name": "@docusaurus/types",
|
|
"version": "^3.7.0"
|
|
},
|
|
{
|
|
"name": "typescript",
|
|
"version": "~5.6.0"
|
|
}
|
|
],
|
|
"ci_tools": [
|
|
{
|
|
"name": "uv",
|
|
"version": "latest"
|
|
},
|
|
{
|
|
"name": "crane",
|
|
"version": "latest"
|
|
},
|
|
{
|
|
"name": "trivy",
|
|
"version": "latest"
|
|
}
|
|
],
|
|
"base_images": {
|
|
"infra/gitea/Dockerfile": [
|
|
"docker.io/library/golang:1.25-alpine3.22",
|
|
"docker.io/library/alpine:3.22"
|
|
],
|
|
"infra/images/selkies/Dockerfile.upstream": [
|
|
"${DISTRIB_IMAGE}:${DISTRIB_RELEASE}"
|
|
]
|
|
}
|
|
}
|