From d1404abd6128a96a1f7eb4f391215b70abe2aee5 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 16 May 2026 07:35:01 +0000 Subject: [PATCH] security: upgrade setuptools to >=78.1.1 to fix path traversal CVE-2025-49 - Resolves path traversal vulnerability in setuptools (PYSEC-2025-49) - Also addresses related CVE-2026-24049 in wheel - Required for secure package building and installation https://claude.ai/code/session_01CUuVVqiQr32khYnEBz1eKD --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 353e61c..c3b2f40 100755 --- a/pyproject.toml +++ b/pyproject.toml @@ -111,5 +111,5 @@ mypy_path = "src" allowlist = "stubtest-allowlist.txt" [build-system] -requires = ["poetry-core>=1.9.0", "setuptools>=65"] +requires = ["poetry-core>=1.9.0", "setuptools>=78.1.1"] build-backend = "poetry.core.masonry.api"