From c1b46fff2c08753acfb5e610c436b07c7c85c4b1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 May 2026 11:01:15 +0000 Subject: [PATCH 1/2] build(deps-dev): bump gunicorn from 20.1.0 to 26.0.0 Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 20.1.0 to 26.0.0. - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](https://github.com/benoitc/gunicorn/compare/20.1.0...26.0.0) --- updated-dependencies: - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- poetry.lock | 50 +++++++++++++------------------------------------- pyproject.toml | 2 +- 2 files changed, 14 insertions(+), 38 deletions(-) diff --git a/poetry.lock b/poetry.lock index d8d3bb9..395a7c6 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1,4 +1,4 @@ -# This file is automatically @generated by Poetry 2.3.1 and should not be changed by hand. +# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand. [[package]] name = "cfgv" @@ -215,24 +215,26 @@ reference = "mdsol" [[package]] name = "gunicorn" -version = "20.1.0" +version = "26.0.0" description = "WSGI HTTP Server for UNIX" optional = false -python-versions = ">=3.5" +python-versions = ">=3.10" groups = ["service"] files = [ - {file = "gunicorn-20.1.0-py3-none-any.whl", hash = "sha256:9dcc4547dbb1cb284accfb15ab5667a0e5d1881cc443e0677b4882a4067a807e"}, - {file = "gunicorn-20.1.0.tar.gz", hash = "sha256:e0a968b5ba15f8a328fdfd7ab1fcb5af4470c28aaf7e55df02a99bc13138e6e8"}, + {file = "gunicorn-26.0.0-py3-none-any.whl", hash = "sha256:40233d26a5f0d1872916188c276e21641155111c2853f0c2cd55260aec0d24fc"}, + {file = "gunicorn-26.0.0.tar.gz", hash = "sha256:ca9346f85e3a4aeeb64d491045c16b9a35647abd37ea15efe53080eb8b090baf"}, ] [package.dependencies] -setuptools = ">=3.0" +packaging = "*" [package.extras] -eventlet = ["eventlet (>=0.24.1)"] -gevent = ["gevent (>=1.4.0)"] +fast = ["gunicorn_h1c (>=0.6.5)"] +gevent = ["gevent (>=24.10.1)"] +http2 = ["h2 (>=4.1.0)"] setproctitle = ["setproctitle"] -tornado = ["tornado (>=0.2)"] +testing = ["coverage", "gevent (>=24.10.1)", "h2 (>=4.1.0)", "httpx[http2]", "pytest", "pytest-asyncio", "pytest-cov", "uvloop (>=0.19.0)"] +tornado = ["tornado (>=6.5.0)"] [package.source] type = "legacy" @@ -585,7 +587,7 @@ version = "26.1" description = "Core utilities for Python packages" optional = false python-versions = ">=3.8" -groups = ["dev", "test"] +groups = ["dev", "service", "test"] files = [ {file = "packaging-26.1-py3-none-any.whl", hash = "sha256:5d9c0669c6285e491e0ced2eee587eaf67b670d94a19e94e3984a481aba6802f"}, {file = "packaging-26.1.tar.gz", hash = "sha256:f042152b681c4bfac5cae2742a55e103d27ab2ec0f3d88037136b6bfe7c9c5de"}, @@ -1165,32 +1167,6 @@ type = "legacy" url = "https://mdsol.jfrog.io/artifactory/api/pypi/pypi-prod-virtual/simple" reference = "mdsol" -[[package]] -name = "setuptools" -version = "82.0.1" -description = "Most extensible Python build backend with support for C/C++ extension modules" -optional = false -python-versions = ">=3.9" -groups = ["service"] -files = [ - {file = "setuptools-82.0.1-py3-none-any.whl", hash = "sha256:a59e362652f08dcd477c78bb6e7bd9d80a7995bc73ce773050228a348ce2e5bb"}, - {file = "setuptools-82.0.1.tar.gz", hash = "sha256:7d872682c5d01cfde07da7bccc7b65469d3dca203318515ada1de5eda35efbf9"}, -] - -[package.extras] -check = ["pytest-checkdocs (>=2.4)", "pytest-ruff (>=0.2.1) ; sys_platform != \"cygwin\"", "ruff (>=0.13.0) ; sys_platform != \"cygwin\""] -core = ["importlib_metadata (>=6) ; python_version < \"3.10\"", "jaraco.functools (>=4)", "jaraco.text (>=3.7)", "more_itertools", "more_itertools (>=8.8)", "packaging (>=24.2)", "tomli (>=2.0.1) ; python_version < \"3.11\"", "wheel (>=0.43.0)"] -cover = ["pytest-cov"] -doc = ["furo", "jaraco.packaging (>=9.3)", "jaraco.tidelift (>=1.4)", "pygments-github-lexers (==0.0.5)", "pyproject-hooks (!=1.1)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-favicon", "sphinx-inline-tabs", "sphinx-lint", "sphinx-notfound-page (>=1,<2)", "sphinx-reredirects", "sphinxcontrib-towncrier", "towncrier (<24.7)"] -enabler = ["pytest-enabler (>=2.2)"] -test = ["build[virtualenv] (>=1.0.3)", "filelock (>=3.4.0)", "ini2toml[lite] (>=0.14)", "jaraco.develop (>=7.21) ; python_version >= \"3.9\" and sys_platform != \"cygwin\"", "jaraco.envs (>=2.2)", "jaraco.path (>=3.7.2)", "jaraco.test (>=5.5)", "packaging (>=24.2)", "pip (>=19.1)", "pyproject-hooks (!=1.1)", "pytest (>=6,!=8.1.*)", "pytest-home (>=0.5)", "pytest-perf ; sys_platform != \"cygwin\"", "pytest-subprocess", "pytest-timeout", "pytest-xdist (>=3)", "tomli-w (>=1.0.0)", "virtualenv (>=13.0.0)", "wheel (>=0.44.0)"] -type = ["importlib_metadata (>=7.0.2) ; python_version < \"3.10\"", "jaraco.develop (>=7.21) ; sys_platform != \"cygwin\"", "mypy (==1.18.*)", "pytest-mypy"] - -[package.source] -type = "legacy" -url = "https://mdsol.jfrog.io/artifactory/api/pypi/pypi-prod-virtual/simple" -reference = "mdsol" - [[package]] name = "six" version = "1.17.0" @@ -1268,4 +1244,4 @@ reference = "mdsol" [metadata] lock-version = "2.1" python-versions = "^3.13" -content-hash = "b6f7ded000698b328661a0002d12b90abacab17b6dcfa87b5601f3bbe038ef4a" +content-hash = "9fa65622fe0a52adcd6ef342095b212bab96350547df8cd7c684c1c966a31ac6" diff --git a/pyproject.toml b/pyproject.toml index 768f12e..196dac7 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ pandas = "^2.0.2" optional = true [tool.poetry.group.service.dependencies] -gunicorn ="^20.1.0" +gunicorn =">=20.1,<27.0" # ML [tool.poetry.group.ml] From feeda2264a7d3e3f636d8b5e6356fae3a692487c Mon Sep 17 00:00:00 2001 From: Irfan Baig Date: Wed, 10 Jun 2026 12:21:50 -0500 Subject: [PATCH 2/2] chore: poetry lock --- poetry.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/poetry.lock b/poetry.lock index 0cd3be0..d58ee12 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1229,4 +1229,4 @@ reference = "mdsol" [metadata] lock-version = "2.1" python-versions = "^3.13" -content-hash = "9fa65622fe0a52adcd6ef342095b212bab96350547df8cd7c684c1c966a31ac6" +content-hash = "2ae0131c6faff8f48045d988d4999531b05b53c2d1334a2c85c151f7c003f75b"