Merge pull request #37 from Conjur-Enterprise/update-deps

CNJR-0000: Update python dependencies

Author: szh

CHANGELOG.md

@@ -6,7 +6,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
-## [0.1.10] - 2026-03-05
+## [0.1.10] - 2026-03-24
 
 ### Security
 - Update python dependencies

requirements.txt

@@ -1,21 +1,20 @@
 # Keep this in sync with setup.cfg
-pytest>=8.4.0
-pytest-cov>=6.1.1
-pylint>=3.3.1
+pytest>=9.0.2
+pytest-cov>=7.1.0
+pylint>=4.0.5
 cryptography~=46.0.5
-keyring>=25.5.0
-pyopenssl>=24.2.1
-PyInstaller>=6.11.0
-PyYAML>=6.0.2
-aiohttp>=3.10.10
+keyring>=25.7.0
+pyopenssl>=26.0.0
+PyInstaller>=6.19.0
+PyYAML>=6.0.3
+aiohttp>=3.13.3
 asynctest>=0.13.0
-setuptools>=80.0.0
-twine>=5.1.1
-build>=1.2.2
-# https://nvd.nist.gov/vuln/detail/CVE-2020-26137
-urllib3>=2.2.2
+setuptools>=82.0.1
+twine>=6.2.0
+build>=1.4.0
+urllib3>=2.6.3
 packaging>=26.0
 
-aiounittest~=1.4.2
-requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
-zipp>=3.20.2 # not directly required, pinned by Snyk to avoid a vulnerability
+aiounittest~=1.5.0
+requests>=2.32.5 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.23.0 # not directly required, pinned by Snyk to avoid a vulnerability

setup.cfg

@@ -34,11 +34,11 @@ include_package_data = False
 
 install_requires =
   cryptography~=46.0.5
-  keyring>=25.5.0
-  aiohttp>=3.10.10
+  keyring>=25.7.0
+  aiohttp>=3.13.3
   asynctest >= 0.13.0; python_version<"3.8"
-  setuptools>=80.0.0
-  urllib3>=2.2.2
+  setuptools>=82.0.1
+  urllib3>=2.6.3
   packaging>=26.0
 
 [options.packages.find]