diff --git a/mcp/slack_tool/pyproject.toml b/mcp/slack_tool/pyproject.toml index 683dfd1a..9d08e93f 100644 --- a/mcp/slack_tool/pyproject.toml +++ b/mcp/slack_tool/pyproject.toml @@ -11,6 +11,6 @@ dependencies = [ "urllib3>=2.7.0", # Indirect; prevents CVE-2025-66418 "python-multipart>=0.0.28", # Indirect; prevents CVE-2026-24486 "fastmcp>=3.2.4", # Indirect; prevents CVE-2026-32871 - "starlette>=0.49.1", # Indirect; prevents CVE-2025-62727 + "starlette>=1.0.1", # Indirect; prevents CVE-2025-62727 "cryptography>=46.0.7,<47", # Indirect; prevents CVE-2026-26007 ] diff --git a/mcp/slack_tool/uv.lock b/mcp/slack_tool/uv.lock index cfa603a1..1a6bfe8e 100644 --- a/mcp/slack_tool/uv.lock +++ b/mcp/slack_tool/uv.lock @@ -474,7 +474,7 @@ requires-dist = [ { name = "python-multipart", specifier = ">=0.0.28" }, { name = "requests", specifier = ">=2.34.0" }, { name = "slack-sdk", specifier = ">=3.41.0" }, - { name = "starlette", specifier = ">=0.49.1" }, + { name = "starlette", specifier = ">=1.0.1" }, { name = "urllib3", specifier = ">=2.7.0" }, ] @@ -1318,15 +1318,15 @@ wheels = [ [[package]] name = "starlette" -version = "1.0.0" +version = "1.0.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "anyio" }, { name = "typing-extensions", marker = "python_full_version < '3.13'" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/81/69/17425771797c36cded50b7fe44e850315d039f28b15901ab44839e70b593/starlette-1.0.0.tar.gz", hash = "sha256:6a4beaf1f81bb472fd19ea9b918b50dc3a77a6f2e190a12954b25e6ed5eea149", size = 2655289, upload-time = "2026-03-22T18:29:46.779Z" } +sdist = { url = "https://files.pythonhosted.org/packages/08/a3/84e821cc54b4ab50ae6dbc6ac3800a651b65ec35f045cc73785380654057/starlette-1.0.1.tar.gz", hash = "sha256:512399c5f1de7fac99c88572212ded9ddeddef2fb32afa82d724000e88b38f4f", size = 2659596, upload-time = "2026-05-21T21:58:58.433Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/0b/c9/584bc9651441b4ba60cc4d557d8a547b5aff901af35bda3a4ee30c819b82/starlette-1.0.0-py3-none-any.whl", hash = "sha256:d3ec55e0bb321692d275455ddfd3df75fff145d009685eb40dc91fc66b03d38b", size = 72651, upload-time = "2026-03-22T18:29:45.111Z" }, + { url = "https://files.pythonhosted.org/packages/ec/e1/b2df4bc09a1e51ff664c1e17018a4274b42e5e9352e4a478ea540512dc88/starlette-1.0.1-py3-none-any.whl", hash = "sha256:7c0e69b2ee1c848bd54669d908500117a3ee13de603a21427e5c6fc1adf98dcd", size = 72802, upload-time = "2026-05-21T21:58:56.551Z" }, ] [[package]]