From e28bfd9c68d7812119752f6d1fad4faa407fff61 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 23:17:21 +0000 Subject: [PATCH] chore(deps): bump python-multipart Bumps the pip group with 1 update in the /server directory: [python-multipart](https://github.com/Kludex/python-multipart). Updates `python-multipart` from 0.0.27 to 0.0.31 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.27...0.0.31) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- server/pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/pyproject.toml b/server/pyproject.toml index c0adc39..c42ec02 100644 --- a/server/pyproject.toml +++ b/server/pyproject.toml @@ -22,7 +22,7 @@ dependencies = [ "email-validator==2.2.0", # python-multipart 0.0.19 had three CVEs (CVE-2026-24486, -40347, -42561); # 0.0.27 is the lowest version that clears all three. - "python-multipart==0.0.27", + "python-multipart==0.0.31", ] [project.optional-dependencies]