fix(deps): bump python-dotenv to >=1.2.2 (CVE symlink overwrite)

Resolves last open Dependabot alert: python-dotenv symlink following in set_key allows arbitrary file overwrite via cross-device rename. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-29 16:37:43 +00:00 · 2026-04-21 22:41:42 +02:00
1 changed files with 1 additions and 1 deletions
@@ -37,7 +37,7 @@ tables
 tree-sitter-python
 tree-sitter

-python-dotenv
+python-dotenv>=1.2.2  # CVE: symlink following allows arbitrary file overwrite

 # infrastructure related.
 docker