Files
justin 1992fb1d17 Bump to Python 3.14.3-slim, fix 9 CVEs, remove leaked PyPI token
- Dockerfile: python:3.13-slim -> python:3.14.3-slim (stable as of Feb 2026)
- certifi: 2023.7.22 -> >=2024.7.4 (CVE-2024-39689, LOW)
- idna: 3.4 -> >=3.7 (CVE-2024-3651, MEDIUM)
- requests: 2.32.0 -> >=2.32.4 (CVE-2024-47081, MEDIUM)
- urllib3: 2.0.6 -> >=2.6.3 (6 CVEs including 3 HIGH decompression/redirect)
- Add app/.pypirc and .pypirc to .gitignore to prevent future token leaks

NOTE: PyPI token was previously committed at 21f32e5 - rotate at pypi.org.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 19:32:41 -05:00

21 lines
291 B
Plaintext

logs/*
.env/*
.DS_Store
uuid.txt
app/metrics
app/metrics.txt
app/statsmetrics
app/statsmetrics.txt
app/threads
app/threads.txt
app/vrametrics
app/vrametrics.txt
app/__pycache__/*
app/microsoft.gpg
app/logs/*
app/zvma10/__pycache__/*
app/zvma9_7/__pycache__/*
app/temp.sh
app/.pypirc
.pypirc