Merge pull request #68 from recklessop/security/cve-fixes-and-python314

Security: Python 3.14.3-slim, fix 9 CVEs, remove leaked PyPI token

.gitignore

@@ -16,3 +16,5 @@ app/logs/*
 app/zvma10/__pycache__/*
 app/zvma9_7/__pycache__/*
 app/temp.sh
+app/.pypirc
+.pypirc

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.13-slim
+FROM python:3.14.3-slim
 
 EXPOSE 9999
 

app/requirements.txt

@@ -3,9 +3,9 @@ annotated-types==0.6.0
 async-timeout==4.0.3
 backoff==2.2.1
 cachetools==5.3.1
-certifi==2023.7.22
+certifi>=2024.7.4
 charset-normalizer==3.3.0
-idna==3.4
+idna>=3.7
 monotonic==1.6
 prompt-toolkit==3.0.39
 pydantic>=2.9.0
@@ -13,9 +13,9 @@ Pygments==2.16.1
 python-dateutil==2.8.2
 pyvim==3.0.3
 pyvmomi==9.0.0.0
-requests==2.32.0
+requests>=2.32.4
 six==1.16.0
 tinydb==4.8.0
 typing_extensions>=4.12.2
-urllib3==2.0.6
+urllib3>=2.6.3
 wcwidth==0.2.8