[apify-deps]

Summary

Dependency sweep — in-range freshening (all within existing ranges):

• cachetools 7.2.4 → 7.2.6
• curl-cffi 0.16.3 → 0.17.0
• grpcio 1.84.1 → 1.85.0
• jsonpath-ng 1.13.0 → 1.14.0
• logfire-api 5.3.0 → 5.4.0
• lxml-html-clean 0.4.5 → 0.4.6
• openai 3.37.0 → 3.39.0
• pytest-asyncio 1.4.0 → 1.4.1
• ruff 0.17.2 → 0.17.3
• ty 0.0.91 → 0.0.92

✅ Dismissed (don't apply to our usage)

All 6 open alerts are filelock CVEs in the SoftFileLock/MarkerSoftFileLock/SoftFileLease/ReadWriteLock/AsyncReadWriteLock classes. crawlee-python only imports the plain filelock.FileLock (native OS flock/LockFileEx lock), and only in tests/e2e/conftest.py to serialize the wheel build in a private pytest tmp dir — none of the vulnerable classes are ever instantiated.

• filelock (high) — not_used: vuln is in ReadWriteLock's SQLite backend; we only use FileLock. (alert #227)
• filelock (medium) — not_used: vuln is in SoftFileLock's stale-break restore; we only use FileLock. (alert #228)
• filelock (medium) — not_used: vuln is in SoftFileLock's marker-eviction timing; we only use FileLock. (alert #229)
• filelock (low) — not_used: Windows-only vuln in SoftFileLock's oplock wait; we only use FileLock. (alert #230)
• filelock (low) — not_used: Windows-only vuln in ReadWriteLock's SQLite side files; we only use FileLock. (alert #231)
• filelock (medium) — not_used: vuln is in ReadWriteLock's hard-link route; we only use FileLock. (alert #232)

Note: even disregarding usage, filelock >4.1.0 requires Python ≥3.11, and this repo supports Python ≥3.10, so no patched version (4.2.1+) is installable on the py3.10 line anyway — moot here since the vulnerable code path isn't used.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.13%. Comparing base (cadd810) to head (f2ab116).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2360      +/-   ##
==========================================
+ Coverage   94.11%   94.13%   +0.02%     
==========================================
  Files         184      184              
  Lines       13647    13647              
==========================================
+ Hits        12844    12847       +3     
+ Misses        803      800       -3     

Flag	Coverage Δ
unit	94.13% <ø> (+0.02%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.