[ROMzombie]

Dependency Update and Security Review (2026-09-18)

Summary of Updates

This PR reviews project dependencies, updates outdated packages to their latest safe and compatible versions, patches 36 known CVEs in Pillow, and verifies the full test suite.

Dependency Audit

Package	Previous Version	Updated Version	Requirement Spec	Category	Security Impact
pillow	12.1.1	12.3.0	>=12.3.0	Minor (Safe)	Patched 36 OSV CVEs (heap overflows, decompression bombs)
uvicorn	0.52.4	0.53.0	[standard]>=0.53.0	Minor (Safe)	Safe minor bump
pydantic	2.13.4	2.13.5	>=2.13.5	Patch (Safe)	Bug fixes
playwright	1.62.0	1.63.0	>=1.63.0	Minor (Safe)	Browser engine updates
gradio_client	2.6.0	2.7.1	>=2.7.1	Minor (Safe)	Hugging Face space client updates
fastapi	0.141.1	0.141.1	>=0.141.1	Up to date	Lower bound modernized
httpx	0.28.1	0.28.1	>=0.28.1	Up to date	Lower bound modernized
python-multipart	0.0.32	0.0.32	>=0.0.32	Up to date	Lower bound modernized
python-dotenv	1.2.3	1.2.3	>=1.2.3	Up to date	Lower bound modernized

Security Findings & Resolution

• Scanned: GitHub Dependabot PRs (0 open PRs found on repository) and the OSV (Open Source Vulnerability) database across all direct and transitive packages.
• Vulnerabilities Fixed: pillow 12.1.1 had 36 CVEs reported in the OSV database. Upgrading to pillow 12.3.0 completely resolved all 36 vulnerabilities (0 vulnerabilities remaining in all primary project dependencies).

Code Changes

• requirements.txt: Updated lower bounds for all direct dependencies to ensure secure, modern versions.
• backend/generator.py: Sanitized exception strings in PerchanceImageGenerator before console printing (err_msg = str(e).encode("ascii", "replace").decode("ascii")) to prevent Windows console charmap UnicodeEncodeError when Playwright or external drivers raise errors with box-drawing Unicode glyphs.

Verification & Quality Gates

• Playwright Drivers: Downloaded matching playwright chromium v1243 binaries.
• Unit Test Suite:
  • tests/test_proxies.py, tests/test_grok.py, tests/test_janus.py, tests/test_api.py, tests/test_pipeline.py: 61 / 61 passed (OK).
  • tests/test_perchance.py: 3 / 3 passed (OK).
• Vulnerability Scan: Verified 0 vulnerabilities across all primary dependencies.