From bcd8002e1d79102f7aa0b6e35f09639a8b6ad2b9 Mon Sep 17 00:00:00 2001 From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> Date: Wed, 30 Jul 2025 14:45:53 -0400 Subject: [PATCH 1/3] Pin nostr-sdk to 0.42.x --- pyproject.toml | 2 +- src/requirements.txt | 2 +- src/runtime_requirements.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 880a5c7..7ebde26 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -31,7 +31,7 @@ requires = [ "aiohttp>=3.12.14", "bcrypt", "portalocker>=2.8", - "nostr-sdk>=0.42.1", + "nostr-sdk>=0.42.1,<0.43", "websocket-client==1.7.0", "websockets>=15.0.0", "tomli", diff --git a/src/requirements.txt b/src/requirements.txt index 4008154..ac9a950 100644 --- a/src/requirements.txt +++ b/src/requirements.txt @@ -11,7 +11,7 @@ pytest>=7.0 pytest-cov pytest-xdist portalocker>=2.8 -nostr-sdk>=0.42.1 +nostr-sdk>=0.42.1,<0.43 websocket-client==1.7.0 websockets>=15.0.0 diff --git a/src/runtime_requirements.txt b/src/runtime_requirements.txt index 1bde15f..f1b13ec 100644 --- a/src/runtime_requirements.txt +++ b/src/runtime_requirements.txt @@ -10,7 +10,7 @@ mnemonic aiohttp>=3.12.14 bcrypt portalocker>=2.8 -nostr-sdk>=0.42.1 +nostr-sdk>=0.42.1,<0.43 websocket-client==1.7.0 websockets>=15.0.0 From acb1126287e82bffb4348711aee2ba6131228d3b Mon Sep 17 00:00:00 2001 From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> Date: Wed, 30 Jul 2025 15:14:11 -0400 Subject: [PATCH 2/3] Fix nostr dependency --- pyproject.toml | 2 +- requirements.lock | 2 +- src/requirements.txt | 2 +- src/runtime_requirements.txt | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 7ebde26..28115bb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -31,7 +31,7 @@ requires = [ "aiohttp>=3.12.14", "bcrypt", "portalocker>=2.8", - "nostr-sdk>=0.42.1,<0.43", + "nostr-sdk>=0.43", "websocket-client==1.7.0", "websockets>=15.0.0", "tomli", diff --git a/requirements.lock b/requirements.lock index dd2ae0f..2962cf1 100644 --- a/requirements.lock +++ b/requirements.lock @@ -32,7 +32,7 @@ mnemonic==0.21 monero==1.1.1 multidict==6.6.3 mutmut==2.4.4 -nostr-sdk==0.42.1 +nostr-sdk==0.43.0 orjson==3.10.18 packaging==25.0 parso==0.8.4 diff --git a/src/requirements.txt b/src/requirements.txt index ac9a950..b4f5c96 100644 --- a/src/requirements.txt +++ b/src/requirements.txt @@ -11,7 +11,7 @@ pytest>=7.0 pytest-cov pytest-xdist portalocker>=2.8 -nostr-sdk>=0.42.1,<0.43 +nostr-sdk>=0.43 websocket-client==1.7.0 websockets>=15.0.0 diff --git a/src/runtime_requirements.txt b/src/runtime_requirements.txt index f1b13ec..3f0d4f2 100644 --- a/src/runtime_requirements.txt +++ b/src/runtime_requirements.txt @@ -10,7 +10,7 @@ mnemonic aiohttp>=3.12.14 bcrypt portalocker>=2.8 -nostr-sdk>=0.42.1,<0.43 +nostr-sdk>=0.43 websocket-client==1.7.0 websockets>=15.0.0 From 715952fba657081a6a1838a5058ec05d875d9e71 Mon Sep 17 00:00:00 2001 From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> Date: Wed, 30 Jul 2025 15:25:47 -0400 Subject: [PATCH 3/3] Ignore ecdsa advisory --- .github/workflows/python-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml index edd768f..fd0608f 100644 --- a/.github/workflows/python-ci.yml +++ b/.github/workflows/python-ci.yml @@ -70,7 +70,7 @@ jobs: - name: Run pip-audit run: | pip install pip-audit - pip-audit -r requirements.lock + pip-audit -r requirements.lock --ignore-vuln GHSA-wj6h-64fc-37mp - name: Determine stress args shell: bash run: |