From: Sebastián Ramírez <tiangolo@gmail.com>
Date: Sat, 3 Feb 2024 12:32:42 +0000 (+0100)
Subject: Merge pull request from GHSA-qf9m-vfgh-m389
X-Git-Tag: 0.109.1~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc;p=thirdparty%2Ffastapi%2Ffastapi.git

Merge pull request from GHSA-qf9m-vfgh-m389
---

diff --git a/pyproject.toml b/pyproject.toml
index 3e43f35e17..31d9c59b38 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -56,7 +56,7 @@ Repository = "https://github.com/tiangolo/fastapi"
 all = [
     "httpx >=0.23.0",
     "jinja2 >=2.11.2",
-    "python-multipart >=0.0.5",
+    "python-multipart >=0.0.7",
     "itsdangerous >=1.1.0",
     "pyyaml >=5.3.1",
     "ujson >=4.0.1,!=4.0.2,!=4.1.0,!=4.2.0,!=4.3.0,!=5.0.0,!=5.1.0",
diff --git a/requirements-tests.txt b/requirements-tests.txt
index e1a976c138..a5586c5cef 100644
--- a/requirements-tests.txt
+++ b/requirements-tests.txt
@@ -13,7 +13,7 @@ sqlalchemy >=1.3.18,<1.4.43
 databases[sqlite] >=0.3.2,<0.7.0
 orjson >=3.2.1,<4.0.0
 ujson >=4.0.1,!=4.0.2,!=4.1.0,!=4.2.0,!=4.3.0,!=5.0.0,!=5.1.0,<6.0.0
-python-multipart >=0.0.5,<0.0.7
+python-multipart >=0.0.7,<0.1.0
 flask >=1.1.2,<3.0.0
 anyio[trio] >=3.2.1,<4.0.0
 python-jose[cryptography] >=3.3.0,<4.0.0