From 133fb5f1eea069011377ffc688c0c659fff5f8c8 Mon Sep 17 00:00:00 2001 From: Ama Date: Wed, 29 Jul 2026 17:05:13 +0400 Subject: [PATCH 1/2] fix(ci): upgrade setuptools for security audit --- .github/workflows/security.yml | 4 ++-- pyproject.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 4113022..cfe598f 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -26,7 +26,7 @@ jobs: - name: Install dependencies run: | - python -m pip install --upgrade pip + python -m pip install --upgrade pip "setuptools>=83.0.0" python -m pip install -e .[dev] - name: Security checks (bandit) @@ -50,7 +50,7 @@ jobs: - name: Upload Trivy results to GitHub Security uses: github/codeql-action/upload-sarif@v4 - if: always() + if: ${{ always() && hashFiles('trivy-results.sarif') != '' }} with: sarif_file: 'trivy-results.sarif' wait-for-processing: false diff --git a/pyproject.toml b/pyproject.toml index 70aeeb5..5d1edca 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,5 +1,5 @@ [build-system] -requires = ["setuptools>=68"] +requires = ["setuptools>=83.0.0"] build-backend = "setuptools.build_meta" [project] From ad07b44fe03a32c0ea2d551c7eb6a8f37dda03a1 Mon Sep 17 00:00:00 2001 From: Ama Date: Wed, 29 Jul 2026 17:15:18 +0400 Subject: [PATCH 2/2] fix(deps): constrain Mindee SDK to v4 --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 5d1edca..0bf15f4 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -20,7 +20,7 @@ dependencies = [ "pydantic-settings>=2.2.0", "python-dotenv>=1.0.1", "Pillow>=10.4.0", - "mindee>=4.27.0", + "mindee>=4.27.0,<5.0.0", "requests>=2.31.0", ]