Merge pull request #210 from Integration-Automation/fix/dependabot-deps

Fix Dependabot alerts: bump cryptography and starlette

Author: JE-Chen

je_auto_control/utils/executor/flow_control.py

@@ -406,7 +406,7 @@ def exec_random_to_var(executor: Any,
                        args: Mapping[str, Any]) -> Dict[str, Any]:
     """Store a random value (int / float / choice) in a flow variable."""
     import random
-    rng = random.Random(args.get("seed"))
+    rng = random.Random(args.get("seed"))  # nosec B311  # reason: non-crypto test data
     kind = str(args.get("kind", "int"))
     if kind == "choice":
         value: Any = rng.choice(list(args.get("choices") or [None]))

je_auto_control/utils/humanize/motion.py

@@ -60,7 +60,7 @@ def humanized_path(start: Point, end: Point,
     is set.
     """
     motion = motion or HumanizedMotion()
-    rng = random.Random(motion.seed)
+    rng = random.Random(motion.seed)  # nosec B311  # reason: non-crypto motion jitter
     sx, sy = float(start[0]), float(start[1])
     ex, ey = float(end[0]), float(end[1])
     dx, dy = ex - sx, ey - sy

je_auto_control/utils/humanize/typing.py

@@ -20,7 +20,7 @@ def humanized_key_delays(text: str, *, base_delay: float = 0.05,
     ``pause_chance`` probability of an extra ``pause_delay`` (a human
     pausing to think). Deterministic when ``seed`` is set.
     """
-    rng = random.Random(seed)
+    rng = random.Random(seed)  # nosec B311  # reason: non-crypto typing jitter
     delays: List[float] = []
     for _ in text:
         delay = max(0.0, base_delay + rng.uniform(-jitter, jitter))

pyproject.toml

@@ -21,7 +21,7 @@ dependencies = [
     "python-Xlib==0.33;platform_system=='Linux'",
     "mss==10.2.0",
     "defusedxml==0.7.1",
-    "cryptography>=42.0.0"
+    "cryptography>=48.0.1"
 ]
 classifiers = [
     "Programming Language :: Python :: 3.10",