From be1cf723d07585fe2b80703b4eee4bf2893509c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 5 Jun 2026 05:07:19 +0000 Subject: [PATCH] chore(deps): Bump python-multipart Bumps the minor-and-patch group in /mcp/reservation_tool with 1 update: [python-multipart](https://github.com/Kludex/python-multipart). Updates `python-multipart` from 0.0.30 to 0.0.32 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.30...0.0.32) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- mcp/reservation_tool/pyproject.toml | 2 +- mcp/reservation_tool/uv.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/mcp/reservation_tool/pyproject.toml b/mcp/reservation_tool/pyproject.toml index d97572a8..0664cc02 100644 --- a/mcp/reservation_tool/pyproject.toml +++ b/mcp/reservation_tool/pyproject.toml @@ -8,7 +8,7 @@ dependencies = [ "pydantic>=2.13.4", "authlib>=1.7.2", # Indirect; prevents CVE-2026-27962 "urllib3>=2.7.0", # Indirect; prevents CVE-2025-66418 - "python-multipart>=0.0.30", # Indirect; prevents CVE-2026-24486 + "python-multipart>=0.0.32", # Indirect; prevents CVE-2026-24486 "fastmcp>=3.4.0", # Indirect; prevents CVE-2026-32871 (critical), CVE-2026-27124 (high) "cryptography>=48.0.0,<49", # Indirect; prevents CVE-2026-26007 "pyjwt>=2.13.0", # Indirect; prevents CVE-2026-32597 diff --git a/mcp/reservation_tool/uv.lock b/mcp/reservation_tool/uv.lock index 10aa8d31..29b724b9 100644 --- a/mcp/reservation_tool/uv.lock +++ b/mcp/reservation_tool/uv.lock @@ -1146,11 +1146,11 @@ wheels = [ [[package]] name = "python-multipart" -version = "0.0.30" +version = "0.0.32" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/4b/82/c8cd43a6e0719bf5a3b034f6726dd701f75829c08944c83d4b95d02ed0e8/python_multipart-0.0.30.tar.gz", hash = "sha256:0edfe0475c1f46ddd3ff7785a626f6118af32bdcf359bb21260367313bb32118", size = 46316, upload-time = "2026-05-31T19:24:55.198Z" } +sdist = { url = "https://files.pythonhosted.org/packages/5b/42/55c32bb9b12693c092ad250a0e82edb5b31ddeda6eb772de5f308b3804ad/python_multipart-0.0.32.tar.gz", hash = "sha256:be54b7f3fa167bb83e4fcd936b887b708f4e57fe75911c02aebf53efaf8d938e", size = 46881, upload-time = "2026-06-04T16:18:58.647Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/1c/fd/0318007beb234790993d3ec5afd051d1dbceb733e81e3afe2b981ece3f37/python_multipart-0.0.30-py3-none-any.whl", hash = "sha256:830964def8c90607ac5daa00514e3987815865713ade8d20febc9177ac0c3c5b", size = 29730, upload-time = "2026-05-31T19:24:53.814Z" }, + { url = "https://files.pythonhosted.org/packages/e1/04/e8135ebd1ad02c56ec633277529b2602ff99ff634be76cdba5744cf554fd/python_multipart-0.0.32-py3-none-any.whl", hash = "sha256:ff6d3f776f16878c894e52e107296ffc890e913c611b1a4ec6c44e2821fe2e23", size = 30042, upload-time = "2026-06-04T16:18:57.319Z" }, ] [[package]] @@ -1308,7 +1308,7 @@ requires-dist = [ { name = "pyjwt", specifier = ">=2.13.0" }, { name = "pytest", marker = "extra == 'dev'", specifier = ">=9.0.3" }, { name = "pytest-asyncio", marker = "extra == 'dev'", specifier = ">=1.4.0" }, - { name = "python-multipart", specifier = ">=0.0.30" }, + { name = "python-multipart", specifier = ">=0.0.32" }, { name = "urllib3", specifier = ">=2.7.0" }, ] provides-extras = ["dev"]