anti
8d18c59201
Gate all 8 swarm-controller operator routes (enroll, list/get/decommission hosts, deploy, teardown, check, list deckies) with the centralized require_admin RBAC dependency alongside require_operator_cert; mTLS becomes defense-in-depth instead of the only gate. /heartbeat stays cert-fingerprint pinned (worker-facing) and /swarm/health stays open (liveness only). CLI swarm commands now send Authorization: Bearer $DECNET_API_TOKEN with a 401/403 hint covering the must_change_password bootstrap flow. Bump pyjwt to 2.13.0 and pip to 26.1.2 (pip-audit PYSEC-2026-175/177/178/179, PYSEC-2026-196); authz suite re-verified on the new pyjwt. Closes ASVS_L2_AUDIT.md V4.1.1a and V4.1.1b (CRITICAL).
84 lines
1.5 KiB
Plaintext
84 lines
1.5 KiB
Plaintext
aiosqlite==0.22.1
|
|
annotated-doc==0.0.4
|
|
annotated-types==0.7.0
|
|
anyio==4.13.0
|
|
attrs==26.1.0
|
|
bandit==1.9.4
|
|
bcrypt==5.0.0
|
|
boolean.py==5.0
|
|
CacheControl==0.14.4
|
|
certifi==2026.2.25
|
|
charset-normalizer==3.4.7
|
|
click==8.3.2
|
|
cyclonedx-python-lib==11.7.0
|
|
defusedxml==0.7.1
|
|
docker==7.1.0
|
|
execnet==2.1.2
|
|
fastapi==0.135.3
|
|
filelock==3.25.2
|
|
freezegun==1.5.5
|
|
graphql-core==3.2.8
|
|
greenlet==3.4.0
|
|
h11==0.16.0
|
|
harfile==0.4.0
|
|
httpcore==1.0.9
|
|
httpx==0.28.1
|
|
hypothesis==6.151.12
|
|
hypothesis-graphql==0.12.0
|
|
hypothesis-jsonschema==0.23.1
|
|
idna==3.11
|
|
iniconfig==2.3.0
|
|
Jinja2==3.1.6
|
|
jsonschema==4.26.0
|
|
jsonschema_rs==0.45.1
|
|
jsonschema-specifications==2025.9.1
|
|
junit-xml==1.9
|
|
license-expression==30.4.4
|
|
markdown-it-py==4.0.0
|
|
MarkupSafe==3.0.3
|
|
mdurl==0.1.2
|
|
msgpack==1.1.2
|
|
packageurl-python==0.17.6
|
|
packaging==26.0
|
|
pip-api==0.0.34
|
|
pip_audit==2.10.0
|
|
pip-requirements-parser==32.0.1
|
|
platformdirs==4.9.4
|
|
pluggy==1.6.0
|
|
psutil==7.2.2
|
|
pydantic==2.12.5
|
|
pydantic_core==2.41.5
|
|
Pygments==2.20.0
|
|
PyJWT==2.13.0
|
|
pyparsing==3.3.2
|
|
pyrate-limiter==4.1.0
|
|
py-serializable==2.1.0
|
|
pytest==9.0.3
|
|
pytest-xdist==3.8.0
|
|
python-dateutil==2.9.0.post0
|
|
python-dotenv==1.2.2
|
|
PyYAML==6.0.3
|
|
referencing==0.37.0
|
|
requests==2.33.1
|
|
rich==14.3.3
|
|
rpds-py==0.30.0
|
|
ruff==0.15.9
|
|
schemathesis==4.15.0
|
|
shellingham==1.5.4
|
|
six==1.17.0
|
|
sortedcontainers==2.4.0
|
|
SQLAlchemy==2.0.49
|
|
sqlmodel==0.0.38
|
|
starlette==1.0.1
|
|
starlette-testclient==0.4.1
|
|
stevedore==5.7.0
|
|
tenacity==9.1.4
|
|
tomli==2.4.1
|
|
tomli_w==1.2.0
|
|
typer==0.24.1
|
|
typing_extensions==4.15.0
|
|
typing-inspection==0.4.2
|
|
urllib3==2.6.3
|
|
uvicorn==0.44.0
|
|
Werkzeug==3.1.8
|