From 1ae2a98592ed9beb7ff8d1026330e6e4c24f68b7 Mon Sep 17 00:00:00 2001 From: Steve Spicklemire Date: Sat, 31 Oct 2026 06:51:56 -0400 Subject: [PATCH 1/2] deps: urllib3 2.8.0, Werkzeug 3.1.9, certifi 2026.10.23 Clears Dependabot alerts #88, #89, #92 (urllib3) and #90 (Werkzeug), and replaces the 2024 certifi CA bundle. Checked in python:3.12-slim (the app.yaml runtime) against the Datastore emulator, master vs this branch: pip check clean; unit suite 19 passed / 2 failed on both (the known stale test_plotusers cases); e2e 20 passed / 3 skipped / 1 failed on both (test_api_unknown_user_returns_404 fails on master too when run locally). Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01QNw6KLiif2r9zSoSQug4iL --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 88c101a1..da471ee0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,7 +2,7 @@ async-timeout==4.0.2 Authlib==1.6.12 blinker==1.9.0 cachetools==5.3.0 -certifi==2024.7.4 +certifi==2026.10.23 cffi==2.0.0 charset-normalizer==3.1.0 click==8.1.3 @@ -39,5 +39,5 @@ requests==2.33.0 rsa==4.9 six==1.16.0 uritemplate==4.1.1 -urllib3==2.7.0 -Werkzeug==3.1.6 +urllib3==2.8.0 +Werkzeug==3.1.9 From f4eb44126f0d1054f67c78f3359bfbd4fddcbc7b Mon Sep 17 00:00:00 2001 From: Steve Spicklemire Date: Sat, 31 Oct 2026 06:51:56 -0400 Subject: [PATCH 2/2] gitignore: also ignore .env.* (except .env.example) and *.pem Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01QNw6KLiif2r9zSoSQug4iL --- .gitignore | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.gitignore b/.gitignore index 1865c288..d7d8508b 100644 --- a/.gitignore +++ b/.gitignore @@ -13,3 +13,6 @@ __pycache__/ /build-tools/Uglify-ES/uglify-es/package-lock.json .env .claude +.env.* +!.env.example +*.pem