From 2a5b9d5d6c332c89019be431d57145d7bffaf62b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 12:26:51 +0000 Subject: [PATCH] build(deps): update pyotp requirement from >=2.9.0 to >=2.10.0 Updates the requirements on [pyotp](https://github.com/pyauth/pyotp) to permit the latest version. - [Release notes](https://github.com/pyauth/pyotp/releases) - [Changelog](https://github.com/pyauth/pyotp/blob/main/Changes.rst) - [Commits](https://github.com/pyauth/pyotp/compare/v2.9.0...v2.10.0) --- updated-dependencies: - dependency-name: pyotp dependency-version: 2.10.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 11959a6..c12af53 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,7 +10,7 @@ fastmcp>=3.4.2 # TOTP 2FA auth (routes/auth.py: /api/auth/totp/* + skills/qr_generator.py). # Previously undeclared runtime deps — the TOTP setup/confirm/verify endpoints # import these lazily; without them the 2FA flow 500s in production. -pyotp>=2.9.0 +pyotp>=2.10.0 qrcode[pil]>=8.2 # Security floors for transitive / runtime deps (Fix #6, re-audit dependency