Bump dependency versions to fix 13 security vulnerabilities

conda/conda-reqs-dev.txt

@@ -1,9 +1,9 @@
-aiohttp>=3.0.0
+aiohttp>=3.14.0
 bandit>=1.7.0
 beautifulsoup4
 black>=20.8b1
 coverage>=7.13.5
-filelock>=3.0.0
+filelock>=3.20.3
 markdown>=3.3.4
 mypy>=0.821
 nbconvert>=6.1.0
@@ -14,13 +14,13 @@ pep8>=1.7.1
 pipreqs>=0.4.9
 pydocstyle>=6.0.0
 pyflakes>=2.2.0
-pylint>=2.5.3
-pytest-cov>=2.11.1
-pytest>=5.0.1
 pygeohash>=1.2.0
+pylint>=2.5.3
 pyroma>=3.1
 pytest-check>=1.0.1
+pytest-cov>=2.11.1
 pytest-xdist>=2.5.0
+pytest>=5.0.1
 respx>=0.20.1
 ruff>=0.6.6
 sphinx_rtd_theme>=0.5.1

conda/conda-reqs.txt

@@ -1,6 +1,7 @@
+aiohttp>=3.14.0  # (sec vuln) transitive dependency via geoip2
 attrs>=18.2.0
 azure-common>=1.1.18
-azure-core>=1.24.0
+azure-core>=1.38.0
 azure-identity>=1.16.1
 azure-keyvault-secrets>=4.0.0
 azure-kusto-data<7.0.0,>=6.0.3
@@ -15,32 +16,36 @@ azure-monitor-query>=1.0.0, <=3.0.0
 azure-storage-blob>=12.28.0
 beautifulsoup4>=4.0.0
 bokeh>=3.0.0
-cryptography>=43.0.1
+cryptography>=48.0.0
 deprecated>=1.2.4
 dnspython>=2.0.0, <3.0.0
 folium>=0.9.0
 geoip2>=2.9.0
+h11>=0.16.0  # (sec vuln) transitive dependency via httpx
 html5lib
 httpx>=0.23.0, <1.0.0
+idna>=3.15  # (sec vuln) transitive dependency via various
 ipython>=8.39.0; python_version <= '3.10'
 ipython>=9.13.0; python_version >= '3.11'
 ipywidgets>=7.4.2, <9.0.0
-jinja2>=3.1.5  # (sec vuln) transitive dependency via multiple packages
+jaraco.context>=6.1.0  # (sec vuln) transitive dependency via keyring
+jinja2>=3.1.6  # (sec vuln) transitive dependency via multiple packages
 keyring>=13.2.1
-lxml>=4.6.5
+lxml>=6.1.1
 matplotlib>=3.0.0
 msal_extensions>=1.3.1
 msal>=1.12.0
 msrest>=0.6.0
-networkx>=2.2
 nest_asyncio>=1.6.0
+networkx>=2.2
 numpy>=1.15.4
 packaging>=26.2
 pandas>=1.4.0, <3.0.0
 panel>=1.2.1
+Pillow>=12.2.0  # (sec vuln) transitive dependency via bokeh
 pydantic>=1.8.0, <3.0.0
 pygments>=2.20.0
-pyjwt>=2.3.0
+pyjwt>=2.13.0
 python-dateutil>=2.8.1
 pytz>=2019.2
 pyyaml>=3.13
@@ -49,7 +54,7 @@ scipy
 setuptools>=40.6.3
 statsmodels
 tldextract>=2.2.2
-tornado>=6.4.2  # (sec vuln) transitive dependency via bokeh
+tornado>=6.5.5  # (sec vuln) transitive dependency via bokeh
 tqdm>=4.36.1
 typing-extensions>=4.15.0
-urllib3>=2.6.3
+urllib3>=2.7.0

docs/requirements.txt

@@ -1,25 +1,25 @@
 attrs>=18.2.0
+azure.mgmt.compute
+azure.mgmt.monitor
 azure.mgmt.network
 azure.mgmt.resource
-azure.mgmt.monitor
-azure.mgmt.compute
-cryptography
+cryptography>=48.0.0
 deprecated>=1.2.4
 docutils<0.22.0
-httpx==0.27.0
+httpx>=0.28.0, <1.0.0
 ipython>=8.39.0; python_version <= '3.10'
 ipython>=9.13.0; python_version >= '3.11'
-jinja2<3.2.0
+jinja2>=3.1.6, <3.2.0
 numpy>=1.15.4
 pandas>=1.1.5
 pydantic>=1.8.0, <3.0.0
 python-dateutil>=2.8.1
 pytz>=2019.2
 pyyaml>=3.13
-typing-extensions>=4.15.0
 readthedocs-sphinx-ext>=2.2.5
 seed_intersphinx_mapping
 sphinx-rtd-theme>=3.1.0,<4.0
 sphinx>=8.1.3; python_version <= '3.11'
 sphinx>=9.1.0; python_version >= '3.12'
 sphinxcontrib-jquery>=4.1,<5
+typing-extensions>=4.15.0

requirements-all.txt

@@ -1,67 +1,72 @@
-azure-mgmt-resourcegraph>=8.0.0
-scipy>=1.1.0
+aiohttp>=3.14.0  # (sec vuln) transitive dependency via geoip2
 attrs>=18.2.0
-mo-sql-parsing<12.0.0,>=11
-openpyxl>=3.0
-packaging>=26.2
+azure-common>=1.1.18
+azure-core>=1.38.0
+azure-identity>=1.16.1
+azure-keyvault-secrets>=4.0.0
+azure-kusto-data<7.0.0,>=6.0.3
+azure-mgmt-compute>=4.6.2
+azure-mgmt-core>=1.6.0
 azure-mgmt-keyvault>=2.0.0
-tqdm>=4.36.1
+azure-mgmt-monitor>=2.0.0
 azure-mgmt-network>=2.7.0
-ipython>=9.13.0; python_version >= "3.11"
-requests>=2.31.0
-msal>=1.12.0
-splunk-sdk!=2.0.0,>=1.6.0
+azure-mgmt-resource>=16.1.0
+azure-mgmt-resourcegraph>=8.0.0
+azure-mgmt-subscription>=3.0.0
+azure-monitor-query<=3.0.0,>=1.0.0
+azure-storage-blob>=12.28.0
 beautifulsoup4>=4.0.0
-azure-mgmt-compute>=4.6.2
+bokeh>=3.0.0
+cryptography>=48.0.0
 deprecated>=1.2.4
-lxml>=4.6.5
-networkx>=2.2
+dnspython<3.0.0,>=2.0.0
 folium>=0.9.0
-panel>=1.2.1
-python-dateutil>=2.8.1
-azure-mgmt-core>=1.6.0
-pygments>=2.20.0
-azure-mgmt-resource>=16.1.0
+geoip2>=2.9.0
+h11>=0.16.0  # (sec vuln) transitive dependency via httpx
+html5lib
+httpx<1.0.0,>=0.23.0
+idna>=3.15  # (sec vuln) transitive dependency via various
+ipython>=8.39.0; python_version <= "3.10"
+ipython>=9.13.0; python_version >= "3.11"
 ipywidgets<9.0.0,>=7.4.2
-msrest>=0.6.0
-sumologic-sdk>=0.1.11
+jaraco.context>=6.1.0  # (sec vuln) transitive dependency via keyring
+jinja2>=3.1.6  # (sec vuln) transitive dependency via multiple packages
 joblib>=1.3.0
-vt-graph-api>=2.0
-passivetotal>=2.5.3
-scikit-learn>=1.0.0
-azure-core>=1.24.0
-azure-identity>=1.16.1
-pyjwt>=2.3.0
-cryptography>=43.0.1
-bokeh>=3.0.0
-pytz>=2019.2
-azure-common>=1.1.18
-numpy>=1.15.4
-rrcf==0.4.4
+keyring>=13.2.1
+lxml>=6.1.1
+matplotlib>=3.0.0
+mo-sql-parsing<12.0.0,>=11
+msal_extensions>=1.3.1
+msal>=1.12.0
+msrest>=0.6.0
 nest_asyncio>=1.6.0
+networkx>=2.2
+numpy>=1.15.4
+openpyxl>=3.0
+packaging>=26.2
+pandas<3.0.0,>=1.4.0
+panel>=1.2.1
+passivetotal>=2.5.3
+Pillow>=12.2.0  # (sec vuln) transitive dependency via bokeh
+pydantic<3.0.0,>=1.8.0
+pygments>=2.20.0
+pyjwt>=2.13.0
 python_openobserve>=0.4.2
-azure-mgmt-monitor>=2.0.0
-ipython>=8.39.0; python_version <= "3.10"
+python-dateutil>=2.8.1
+pytz>=2019.2
 pyyaml>=3.13
-pydantic<3.0.0,>=1.8.0
-pandas<3.0.0,>=1.4.0
-tldextract>=2.2.2
-azure-storage-blob>=12.28.0
-jinja2>=3.1.5
-urllib3>=2.6.3
-dnspython<3.0.0,>=2.0.0
-azure-monitor-query<=3.0.0,>=1.0.0
-azure-keyvault-secrets>=4.0.0
-httpx<1.0.0,>=0.23.0
+requests>=2.31.0
+rrcf==0.4.4
+scikit-learn>=1.0.0
+scipy>=1.1.0
 setuptools>=40.6.3
-typing-extensions>=4.15.0
-geoip2>=2.9.0
+splunk-sdk!=2.0.0,>=1.6.0
 statsmodels>=0.11.1
-azure-mgmt-subscription>=3.0.0
-matplotlib>=3.0.0
-msal_extensions>=1.3.1
-tornado>=6.4.2
-keyring>=13.2.1
+sumologic-sdk>=0.1.11
+tldextract>=2.2.2
+tornado>=6.5.5  # (sec vuln) transitive dependency via bokeh
+tqdm>=4.36.1
+typing-extensions>=4.2.0
+urllib3>=2.7.0
+vt-graph-api>=2.0
 vt-py>=0.18.0
-azure-kusto-data<7.0.0,>=6.0.3
-html5lib

requirements.txt

@@ -1,6 +1,7 @@
+aiohttp>=3.14.0  # (sec vuln) transitive dependency via geoip2
 attrs>=18.2.0
 azure-common>=1.1.18
-azure-core>=1.24.0
+azure-core>=1.38.0
 azure-identity>=1.16.1
 azure-keyvault-secrets>=4.0.0
 azure-kusto-data>=6.0.3, <7.0.0
@@ -10,37 +11,41 @@ azure-mgmt-subscription>=3.0.0
 azure-monitor-query>=1.0.0, <=3.0.0
 beautifulsoup4>=4.0.0
 bokeh>=3.0.0
-cryptography>=43.0.1
+cryptography>=48.0.0
 deprecated>=1.2.4
 dnspython>=2.0.0, <3.0.0
 folium>=0.9.0
 geoip2>=2.9.0
-httpx>=0.23.0, <1.0.0
+h11>=0.16.0  # (sec vuln) transitive dependency via httpx
 html5lib
+httpx>=0.23.0, <1.0.0
+idna>=3.15  # (sec vuln) transitive dependency via various
 ipython>=8.39.0; python_version <= '3.10'
 ipython>=9.13.0; python_version >= '3.11'
 ipywidgets>=7.4.2, <9.0.0
-jinja2>=3.1.5  # (sec vuln) transitive dependency via multiple packages
+jaraco.context>=6.1.0  # (sec vuln) transitive dependency via keyring
+jinja2>=3.1.6  # (sec vuln) transitive dependency via multiple packages
 keyring>=13.2.1
-lxml>=4.6.5
-msal>=1.12.0
+lxml>=6.1.1
 msal_extensions>=1.3.1
+msal>=1.12.0
 msrest>=0.6.0
 nest_asyncio>=1.6.0
 networkx>=2.2
 numpy>=1.15.4  # pandas
 packaging>=26.2
 pandas>=1.4.0, <3.0.0
 panel>=1.2.1
+Pillow>=12.2.0  # (sec vuln) transitive dependency via bokeh
 pydantic>=1.8.0, <3.0.0
 pygments>=2.20.0
-pyjwt>=2.3.0
+pyjwt>=2.13.0
 python-dateutil>=2.8.1  # pandas
 pytz>=2019.2  # pandas
 pyyaml>=3.13
 setuptools>=40.6.3
 tldextract>=2.2.2
-tornado>=6.4.2  # (sec vuln) transitive dependency via bokeh
+tornado>=6.5.5  # (sec vuln) transitive dependency via bokeh
 tqdm>=4.36.1
 typing-extensions>=4.15.0
-urllib3>=2.6.3
+urllib3>=2.7.0