deps(python): update openpyxl requirement from >=3.1.0 to >=3.1.5 - #20
Open
dependabot[bot] wants to merge 20 commits into
Open
deps(python): update openpyxl requirement from >=3.1.0 to >=3.1.5#20dependabot[bot] wants to merge 20 commits into
dependabot[bot] wants to merge 20 commits into
Conversation
Bumps python from 3.12-slim to 3.14-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ct (#3) Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.312.0 to 0.575.0. - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.575.0/packages/lucide-react) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 0.575.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [concurrently](https://github.com/open-cli-tools/concurrently) from 8.2.2 to 9.2.1. - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v8.2.2...v9.2.1) --- updated-dependencies: - dependency-name: concurrently dependency-version: 9.2.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… Handler, vLLM arrow direction corrected Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- STREAM_Architecture.png: dashed outbound connection arrows added for both Worker Task and HPC Proxy connecting to WebSocket relay, making the dual-channel firewall traversal visually explicit - pearc26-stream-paper.tex: caption updated — Streaming Handler now correctly described as orchestrator invoking the Context Summarizer, outbound connection model explained - pearc26-stream-paper-extended.tex: caption updated to match - pearc26-stream-poster.tex: long caption rewritten to reflect correct pipeline order and dual-channel outbound connection model Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…rol Plane from left) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…eaks allowlist - fastapi: exclude 0.136.3 (MAL-2026-4750, undocumented fastar dependency); uv resolves to 0.136.1 instead - .gitleaks.toml: add docs/test-plan.md, docs/proxy-vm-deployment.md, docs/vm-hpc-as-api-migration.md to allowlist (placeholder curl examples) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
crypto.py and README.md contain placeholder values (my-shared-secret) used in documentation examples, not real credentials. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
dependabot
Bot
added
dependencies
) * Move RELAY_SECRET to endpoint worker_init (no task-arg credentials) Refactor remote_vllm_streaming so the Lakeshore worker reads RELAY_SECRET from os.environ on the endpoint (set in worker_init), the same way it already reads RELAY_ENCRYPTION_KEY. Drop RELAY_SECRET from the gce.submit() positional args and from the imports. After this change, no relay credentials traverse Globus Compute's AMQP channel — both the channel-access token (RELAY_SECRET) and the AES-256-GCM payload key (RELAY_ENCRYPTION_KEY) are pre-provisioned on the HPC endpoint. Deployment requirement: add `export RELAY_SECRET=...` to ~/.globus_compute/<endpoint>/config.yaml worker_init alongside the existing RELAY_ENCRYPTION_KEY export, then restart the endpoint. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Bump aiohttp 3.13.5 -> 3.14.0 (CVE-2026-34993, CVE-2026-47265) pip-audit on the security workflow flagged two CVEs in the transitive aiohttp dependency. Both are fixed in 3.14.0. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
When a Globus access token is supplied, submit_streaming_inference() creates a short-lived Executor authenticated as the caller so that SLURM jobs appear under the user's own identity on the HPC cluster. API-key callers continue using the persistent executor (stored creds). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
feat: per-user Globus token + SSL fix for wss:// relay connections
…s-api) vLLM streaming delta uses "reasoning" field, not "reasoning_content". Both proxy and Globus Compute client now forward reasoning tokens as reasoning_content in SSE delta chunks, matching hpc-as-api v0.3.9. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Gemma 4 31B Instruct is now running on ga-002 (2× A100 SXM4 80GB, batch_gpuapi, ts_acer account). Qwen 2.5-VL-72B-AWQ remains registered in LAKESHORE_MODELS for when ghi2-002 is re-allocated. Changes: - config.py: add lakeshore-gemma4-31b entry (ga-002:8001, hf_name=gemma4-31b, text-only); set as DEFAULT_MODELS lakeshore; add 131072/8192 context limits - config.py: keep lakeshore-qwen-vl-72b as DEFAULT_VISION_MODELS lakeshore and in VISION_CAPABLE_MODELS (it's multimodal when running) - litellm_config.yaml: add lakeshore-gemma4-31b model entry + timeout - proxy/app.py: update context fallback to lakeshore-gemma4-31b - context_window.py: update lakeshore tier summary to gemma4-31b (128K) - .env: update VLLM_SERVER_URL to http://ga-002:8001 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fix 14 CVEs flagged by pip-audit in CI: - aiohttp 3.13.5 → 3.14.1 (CVE-2026-54273..54280) - cryptography 48.0.0 → 49.0.0 (GHSA-537c-gmf6-5ccf) - python-multipart 0.0.29 → 0.0.32 (CVE-2026-53538..53540) - starlette 1.1.0 → 1.3.1 (CVE-2026-54282..54283) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Updates the requirements on [openpyxl](https://openpyxl.readthedocs.io) to permit the latest version. --- updated-dependencies: - dependency-name: openpyxl dependency-version: 3.1.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/openpyxl-gte-3.1.5
branch
from
June 16, 2026 14:19
783d5a1 to
0a64ae7
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on openpyxl to permit the latest version.