From 5fc2ddc9990e2bb50f96fd27e5bef7ed1c674ddf Mon Sep 17 00:00:00 2001 From: Thomas Juul Dyhr Date: Wed, 1 Apr 2026 13:16:57 +0200 Subject: [PATCH] =?UTF-8?q?fix(deps):=20bump=20wheel=20>=3D0.44=20?= =?UTF-8?q?=E2=86=92=20>=3D0.46.2=20(CVE-2026-24049)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit wheel <0.46.2 has a known vulnerability (CVE-2026-24049). Raising the minimum dev dependency version ensures fresh installs get the patched release. This is a build/packaging tool only — not a runtime dependency. Co-Authored-By: Claude Sonnet 4.6 --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index d8ae42b..47a9dd5 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -47,7 +47,7 @@ dev = [ "mypy>=1.10", "types-PyYAML>=6.0.12", "build>=1.0", - "wheel>=0.44", + "wheel>=0.46.2", "twine>=6.0", ] test = [