From 1fad4f15f07af79853a85810a06a1dc942c999ab Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Fri, 17 Apr 2026 17:59:14 +0200 Subject: [PATCH 01/18] doc: demo credentials updated --- README.md | 11 +++++++++++ doc/getting-started.md | 28 ++++++++++++++++++++++++++++ 2 files changed, 39 insertions(+) diff --git a/README.md b/README.md index c10b898..32c6c81 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,17 @@ ## 🚀 Quick Start +### 0. Try It Now (Demo Credentials) + +No account needed — use these public demo credentials to test immediately: + +| | | +|---|---| +| **API key** | `NOMYO_AI_E2EE_INFERENCE` | +| **Model** | `Qwen/Qwen3-0.6B` | + +> **Note:** The demo endpoint uses a fixed 256-token context window and is intended for evaluation only. + ### 1. Install methods via pip (recommended): diff --git a/doc/getting-started.md b/doc/getting-started.md index 4ccdf82..1cf78a4 100644 --- a/doc/getting-started.md +++ b/doc/getting-started.md @@ -1,5 +1,33 @@ # Getting Started +## Try It Now (Demo Credentials) + +You can test the client immediately using these public demo credentials — no sign-up required: + +| | | +|---|---| +| **API key** | `NOMYO_AI_E2EE_INFERENCE` | +| **Model** | `Qwen/Qwen3-0.6B` | + +> **Note:** The demo endpoint uses a fixed 256-token context window and is intended for evaluation only. + +```python +import asyncio +from nomyo import SecureChatCompletion + +async def main(): + client = SecureChatCompletion(api_key="NOMYO_AI_E2EE_INFERENCE") + + response = await client.create( + model="Qwen/Qwen3-0.6B", + messages=[{"role": "user", "content": "Hello!"}] + ) + + print(response['choices'][0]['message']['content']) + +asyncio.run(main()) +``` + ## Basic Usage The NOMYO client provides end-to-end encryption (E2E) for all communications between your application and the NOMYO inference endpoints. This ensures that your prompts and responses are protected from unauthorized access or interception. From e440a7c43b6234864cd8d6a105d7fd3fefc9634a Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Sat, 18 Apr 2026 15:38:03 +0200 Subject: [PATCH 02/18] fix: adding missing import doc: added TPM attestation related information --- doc/api-reference.md | 20 +++++++++ doc/security-guide.md | 79 ++++++++++++++++++++++++++++++++- nomyo/SecureCompletionClient.py | 2 +- 3 files changed, 99 insertions(+), 2 deletions(-) diff --git a/doc/api-reference.md b/doc/api-reference.md index 363c865..1069082 100644 --- a/doc/api-reference.md +++ b/doc/api-reference.md @@ -75,10 +75,30 @@ A dictionary containing the chat completion response with the following structur "prompt_tokens": int, "completion_tokens": int, "total_tokens": int + }, + "_metadata": { + "payload_id": str, + "processed_at": int, # Unix timestamp + "is_encrypted": bool, + "response_status": str, + "security_tier": str, # "standard", "high", or "maximum" + "memory_protection": dict, # server-side memory protection info + "cuda_device": dict, # privacy-safe GPU info (hashed identifiers) + "tpm_attestation": { # TPM 2.0 hardware attestation (see Security Guide) + "is_available": bool, + # Present only when is_available is True: + "pcr_banks": str, # e.g. "sha256:0,7,10" + "pcr_values": dict, # {bank: {pcr_index: hex_digest}} + "quote_b64": str, # base64-encoded TPMS_ATTEST (signed by AIK) + "signature_b64": str, # base64-encoded TPMT_SIGNATURE + "aik_pubkey_b64": str, # base64-encoded TPM2B_PUBLIC (ephemeral AIK) + } } } ``` +The `_metadata` field is added by the client library and is not part of the OpenAI API response format. See the [Security Guide](security-guide.md) for how to interpret and verify `tpm_attestation`. + #### acreate(model, messages, **kwargs) Async alias for create() method. diff --git a/doc/security-guide.md b/doc/security-guide.md index 6c34f71..6e4abdc 100644 --- a/doc/security-guide.md +++ b/doc/security-guide.md @@ -162,6 +162,81 @@ Secure memory features: - Guarantees zeroing of sensitive memory - Prevents memory dumps from containing sensitive data +## Hardware Attestation (TPM 2.0) + +### What it is + +When the server has a TPM 2.0 chip, every response includes a `tpm_attestation` block in `_metadata`. This is a cryptographically signed hardware quote proving: + +- Which firmware and Secure Boot state the server is running (PCR 0, 7) +- Which application binary is running, when IMA is active (PCR 10) + +The quote is signed by an ephemeral AIK (Attestation Identity Key) generated fresh for each request and tied to the `payload_id` nonce, so it cannot be replayed for a different request. + +### Reading the attestation + +```python +response = await client.create( + model="Qwen/Qwen3-0.6B", + messages=[{"role": "user", "content": "..."}], + security_tier="maximum" +) + +tpm = response["_metadata"].get("tpm_attestation", {}) + +if tpm.get("is_available"): + print("PCR banks:", tpm["pcr_banks"]) # e.g. "sha256:0,7,10" + print("PCR values:", tpm["pcr_values"]) # {bank: {index: hex}} + print("AIK key:", tpm["aik_pubkey_b64"][:32], "...") +else: + print("TPM not available on this server") +``` + +### Verifying the quote + +The response is self-contained: `aik_pubkey_b64` is the full public key of the AIK that signed the quote, so no separate key-fetch round-trip is needed. + +Verification steps using `tpm2-pytss`: + +```python +import base64 +from tpm2_pytss.types import TPM2B_PUBLIC, TPMT_SIGNATURE, TPM2B_ATTEST + +# 1. Decode the quote components +aik_pub = TPM2B_PUBLIC.unmarshal(base64.b64decode(tpm["aik_pubkey_b64"]))[0] +quote = TPM2B_ATTEST.unmarshal(base64.b64decode(tpm["quote_b64"]))[0] +sig = TPMT_SIGNATURE.unmarshal(base64.b64decode(tpm["signature_b64"]))[0] + +# 2. Verify the signature over the quote using the AIK public key +# (use a TPM ESAPI verify_signature call or an offline RSA verify) + +# 3. Inspect the qualifying_data inside the quote — it must match +# SHA-256(payload_id.encode())[:16] to confirm this quote is for this request + +# 4. Check pcr_values against your known-good baseline +``` + +> Full verification requires `tpm2-pytss` on the client side (`pip install tpm2-pytss` + `sudo apt install libtss2-dev`). It is optional — the attestation is informational unless your deployment policy requires verification. + +### Behaviour per security tier + +| Tier | TPM unavailable | +|------|----------------| +| `standard` | `tpm_attestation: {"is_available": false}` — request proceeds | +| `high` | same as standard | +| `maximum` | `ServiceUnavailableError` (HTTP 503) — request rejected | + +For `maximum` tier, the server enforces TPM availability as a hard requirement. If your server has no TPM and you request `maximum`, catch the error explicitly: + +```python +from nomyo import ServiceUnavailableError + +try: + response = await client.create(..., security_tier="maximum") +except ServiceUnavailableError as e: + print("Server does not meet TPM requirements for maximum tier:", e) +``` + ## Compliance Considerations ### HIPAA Compliance @@ -207,9 +282,11 @@ response = await client.create( messages=[{"role": "user", "content": "Hello"}] ) -print(response["_metadata"]) # Contains security-related information +print(response["_metadata"]) # Contains security_tier, memory_protection, tpm_attestation, etc. ``` +See [Hardware Attestation](#hardware-attestation-tpm-20) for details on the `tpm_attestation` field. + ### Logging Enable logging to see security operations: diff --git a/nomyo/SecureCompletionClient.py b/nomyo/SecureCompletionClient.py index 4c1d96d..6aa5379 100644 --- a/nomyo/SecureCompletionClient.py +++ b/nomyo/SecureCompletionClient.py @@ -1,5 +1,5 @@ import asyncio, ctypes, json, base64, urllib.parse, httpx, os, secrets, sys, warnings, logging -from typing import Dict, Any, Optional +from typing import Dict, Any, Optional, Union from cryptography.hazmat.primitives import serialization, hashes from cryptography.hazmat.primitives.asymmetric import rsa, padding from cryptography.hazmat.backends import default_backend From 1330a1068f9ad5484e525c9c77d1d2a9fb8ce39d Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Sat, 18 Apr 2026 15:48:21 +0200 Subject: [PATCH 03/18] bump: version --- nomyo/__init__.py | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nomyo/__init__.py b/nomyo/__init__.py index 5773045..6fb55fe 100644 --- a/nomyo/__init__.py +++ b/nomyo/__init__.py @@ -51,6 +51,6 @@ try: except ImportError: pass -__version__ = "0.2.6" +__version__ = "0.2.7" __author__ = "NOMYO AI" __license__ = "Apache-2.0" diff --git a/pyproject.toml b/pyproject.toml index 5576a31..d0f08cb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "hatchling.build" [project] name = "nomyo" -version = "0.2.6" +version = "0.2.7" description = "OpenAI-compatible secure chat client with end-to-end encryption for NOMYO Inference Endpoints" authors = [ {name = "NOMYO.AI", email = "ichi@nomyo.ai"}, From 4cfc98de9dd556ced880d91beb721cd85dee2152 Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Tue, 5 May 2026 09:18:19 +0200 Subject: [PATCH 04/18] fix: timeouts --- nomyo/SecureCompletionClient.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nomyo/SecureCompletionClient.py b/nomyo/SecureCompletionClient.py index 6aa5379..9c503a8 100644 --- a/nomyo/SecureCompletionClient.py +++ b/nomyo/SecureCompletionClient.py @@ -301,7 +301,7 @@ class SecureCompletionClient: verify_ssl = self.router_url.startswith("https://") async with httpx.AsyncClient( - timeout=60.0, + timeout=900.0, verify=verify_ssl, # Verify SSL/TLS certificates for HTTPS ) as client: response = await client.get(url) @@ -673,7 +673,7 @@ class SecureCompletionClient: await asyncio.sleep(delay) try: - async with httpx.AsyncClient(timeout=60.0) as client: + async with httpx.AsyncClient(timeout=900.0) as client: response = await client.post( url, headers=headers, From a9c3562088b91f6b916b70409f90aaab332bc782 Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Tue, 5 May 2026 09:18:45 +0200 Subject: [PATCH 05/18] bump: version --- nomyo/__init__.py | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nomyo/__init__.py b/nomyo/__init__.py index 6fb55fe..a4aa26a 100644 --- a/nomyo/__init__.py +++ b/nomyo/__init__.py @@ -51,6 +51,6 @@ try: except ImportError: pass -__version__ = "0.2.7" +__version__ = "0.2.8" __author__ = "NOMYO AI" __license__ = "Apache-2.0" diff --git a/pyproject.toml b/pyproject.toml index d0f08cb..74c4203 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "hatchling.build" [project] name = "nomyo" -version = "0.2.7" +version = "0.2.8" description = "OpenAI-compatible secure chat client with end-to-end encryption for NOMYO Inference Endpoints" authors = [ {name = "NOMYO.AI", email = "ichi@nomyo.ai"}, From 2cb2cc6f77295c734c4fec3cbd07dd276224cbd6 Mon Sep 17 00:00:00 2001 From: renovate-bot Date: Sat, 9 May 2026 20:14:19 +0000 Subject: [PATCH 06/18] Add renovate.json --- renovate.json | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 renovate.json diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..6af7325 --- /dev/null +++ b/renovate.json @@ -0,0 +1,6 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "local>nomyo-ai/renovate-config" + ] +} From 0b8c52e0daae1c7c89e2afccdbb70d3072222b6a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 20:17:43 +0000 Subject: [PATCH 07/18] fix(deps): update dependency cryptography to v46.0.7 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 74c4203..3c4bbcc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -30,7 +30,7 @@ dependencies = [ "anyio==4.12.0", "certifi==2025.11.12", "cffi==2.0.0", - "cryptography==46.0.6", + "cryptography==46.0.7", "exceptiongroup==1.3.1", "h11==0.16.0", "httpcore==1.0.9", diff --git a/requirements.txt b/requirements.txt index 868c9f0..74240a0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,7 +1,7 @@ anyio==4.12.0 certifi==2025.11.12 cffi==2.0.0 -cryptography==46.0.6 +cryptography==46.0.7 exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 From e44c11e8965ca355523e5ce6d8a73890eecd468c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 20:18:02 +0000 Subject: [PATCH 08/18] fix(deps): update dependency anyio to v4.13.0 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 74c4203..fd2129c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -27,7 +27,7 @@ classifiers = [ ] requires-python = ">=3.10" dependencies = [ - "anyio==4.12.0", + "anyio==4.13.0", "certifi==2025.11.12", "cffi==2.0.0", "cryptography==46.0.6", diff --git a/requirements.txt b/requirements.txt index 868c9f0..affcdad 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -anyio==4.12.0 +anyio==4.13.0 certifi==2025.11.12 cffi==2.0.0 cryptography==46.0.6 From 8c3de5bfe40842e8da23585fbbe308eff2c2326f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 20:18:10 +0000 Subject: [PATCH 09/18] fix(deps): update dependency idna to v3.13 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 74c4203..3c815f8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -35,7 +35,7 @@ dependencies = [ "h11==0.16.0", "httpcore==1.0.9", "httpx==0.28.1", - "idna==3.11", + "idna==3.13", "pycparser==2.23", "typing_extensions==4.15.0", ] diff --git a/requirements.txt b/requirements.txt index 868c9f0..4ff952c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,6 +6,6 @@ exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 -idna==3.11 +idna==3.13 pycparser==2.23 typing_extensions==4.15.0 From c65f01b59cc2743fd0d9480ab0a0c9a3f4a2243f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 20:19:39 +0000 Subject: [PATCH 10/18] fix(deps): update dependency certifi to v2026 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e924a8b..a4beec6 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -28,7 +28,7 @@ classifiers = [ requires-python = ">=3.10" dependencies = [ "anyio==4.13.0", - "certifi==2025.11.12", + "certifi==2026.4.22", "cffi==2.0.0", "cryptography==46.0.7", "exceptiongroup==1.3.1", diff --git a/requirements.txt b/requirements.txt index 18b3715..655c010 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ anyio==4.13.0 -certifi==2025.11.12 +certifi==2026.4.22 cffi==2.0.0 cryptography==46.0.7 exceptiongroup==1.3.1 From 1452795e9ab124fdd5dcc4cd17ad83530f424341 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 21:00:48 +0000 Subject: [PATCH 11/18] fix(deps): update dependency cryptography to v48 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e924a8b..c4bdc3d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -30,7 +30,7 @@ dependencies = [ "anyio==4.13.0", "certifi==2025.11.12", "cffi==2.0.0", - "cryptography==46.0.7", + "cryptography==48.0.0", "exceptiongroup==1.3.1", "h11==0.16.0", "httpcore==1.0.9", diff --git a/requirements.txt b/requirements.txt index 18b3715..e6493c9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,7 +1,7 @@ anyio==4.13.0 certifi==2025.11.12 cffi==2.0.0 -cryptography==46.0.7 +cryptography==48.0.0 exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 From 81892b3e4e035953593ad2c08603e84898f38127 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 9 May 2026 21:00:57 +0000 Subject: [PATCH 12/18] fix(deps): update dependency pycparser to v3 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e924a8b..715bbf7 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -36,7 +36,7 @@ dependencies = [ "httpcore==1.0.9", "httpx==0.28.1", "idna==3.13", - "pycparser==2.23", + "pycparser==3.0", "typing_extensions==4.15.0", ] diff --git a/requirements.txt b/requirements.txt index 18b3715..cd4d585 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,5 +7,5 @@ h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 idna==3.13 -pycparser==2.23 +pycparser==3.0 typing_extensions==4.15.0 From c76e48c7388411ae86707ac892e05b46982484ee Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 10 May 2026 20:39:38 +0000 Subject: [PATCH 13/18] fix(deps): update dependency idna to v3.14 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 927020f..2199bb2 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -35,7 +35,7 @@ dependencies = [ "h11==0.16.0", "httpcore==1.0.9", "httpx==0.28.1", - "idna==3.13", + "idna==3.14", "pycparser==3.0", "typing_extensions==4.15.0", ] diff --git a/requirements.txt b/requirements.txt index 46688c9..5ac5bfb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,6 +6,6 @@ exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 -idna==3.13 +idna==3.14 pycparser==3.0 typing_extensions==4.15.0 From 8b90f9224f8aca769929c1f1bf5668fe988e191d Mon Sep 17 00:00:00 2001 From: alpha nerd Date: Mon, 11 May 2026 10:27:33 +0200 Subject: [PATCH 14/18] bump: version --- nomyo/__init__.py | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nomyo/__init__.py b/nomyo/__init__.py index a4aa26a..38d9bef 100644 --- a/nomyo/__init__.py +++ b/nomyo/__init__.py @@ -51,6 +51,6 @@ try: except ImportError: pass -__version__ = "0.2.8" +__version__ = "0.2.9" __author__ = "NOMYO AI" __license__ = "Apache-2.0" diff --git a/pyproject.toml b/pyproject.toml index 2199bb2..f5820c2 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "hatchling.build" [project] name = "nomyo" -version = "0.2.8" +version = "0.2.9" description = "OpenAI-compatible secure chat client with end-to-end encryption for NOMYO Inference Endpoints" authors = [ {name = "NOMYO.AI", email = "ichi@nomyo.ai"}, From 92e04bcbac5515654ee68470a816029215114c7a Mon Sep 17 00:00:00 2001 From: alpha-nerd Date: Wed, 13 May 2026 10:13:51 +0200 Subject: [PATCH 15/18] =?UTF-8?q?.forgejo/workflows/nyx-scan.yml=20hinzuge?= =?UTF-8?q?f=C3=BCgt?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .forgejo/workflows/nyx-scan.yml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .forgejo/workflows/nyx-scan.yml diff --git a/.forgejo/workflows/nyx-scan.yml b/.forgejo/workflows/nyx-scan.yml new file mode 100644 index 0000000..2ee672c --- /dev/null +++ b/.forgejo/workflows/nyx-scan.yml @@ -0,0 +1,32 @@ +name: NYX Security Scan + +on: + pull_request: + branches: [main, master] + +jobs: + nyx-scan: + runs-on: docker-amd64 + + steps: + - name: Checkout PR + run: | + git clone --depth=1 \ + "https://oauth2:${{ github.token }}@bitfreedom.net/code/${{ github.repository }}.git" \ + . + git fetch --depth=1 origin ${{ github.sha }} + git checkout ${{ github.sha }} + + - name: Fetch action source + run: | + git clone --depth=1 --branch master \ + "https://oauth2:${{ github.token }}@bitfreedom.net/code/nomyo-ai/actions.git" \ + ./.nyx-action + + - uses: ./.nyx-action/nyx-scan + with: + forgejo_push_token: ${{ secrets.FORGEJO_PUSH_TOKEN }} + repository: ${{ github.repository }} + pr_number: ${{ github.event.pull_request.number }} + sha: ${{ github.sha }} + fail_on: HIGH \ No newline at end of file From daa277243902717af1d2e04cf9f1fbf094693651 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 13 May 2026 08:29:06 +0000 Subject: [PATCH 16/18] fix(deps): update dependency idna to v3.15 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index f5820c2..a5f2124 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -35,7 +35,7 @@ dependencies = [ "h11==0.16.0", "httpcore==1.0.9", "httpx==0.28.1", - "idna==3.14", + "idna==3.15", "pycparser==3.0", "typing_extensions==4.15.0", ] diff --git a/requirements.txt b/requirements.txt index 5ac5bfb..c53cfd7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,6 +6,6 @@ exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 -idna==3.14 +idna==3.15 pycparser==3.0 typing_extensions==4.15.0 From b9fbf4ef729ccef6b0d65a07b32d3b7dc64dd38d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 20 May 2026 11:53:55 +0000 Subject: [PATCH 17/18] fix(deps): update dependency certifi to v2026.5.20 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index a5f2124..c3b83bb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -28,7 +28,7 @@ classifiers = [ requires-python = ">=3.10" dependencies = [ "anyio==4.13.0", - "certifi==2026.4.22", + "certifi==2026.5.20", "cffi==2.0.0", "cryptography==48.0.0", "exceptiongroup==1.3.1", diff --git a/requirements.txt b/requirements.txt index c53cfd7..d5cbcea 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ anyio==4.13.0 -certifi==2026.4.22 +certifi==2026.5.20 cffi==2.0.0 cryptography==48.0.0 exceptiongroup==1.3.1 From ed25554b45706973fde6a3ebd18c4a928a308536 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 22 May 2026 00:24:17 +0000 Subject: [PATCH 18/18] fix(deps): update dependency idna to v3.16 --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index c3b83bb..c42fef8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -35,7 +35,7 @@ dependencies = [ "h11==0.16.0", "httpcore==1.0.9", "httpx==0.28.1", - "idna==3.15", + "idna==3.16", "pycparser==3.0", "typing_extensions==4.15.0", ] diff --git a/requirements.txt b/requirements.txt index d5cbcea..2e17834 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,6 +6,6 @@ exceptiongroup==1.3.1 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 -idna==3.15 +idna==3.16 pycparser==3.0 typing_extensions==4.15.0