detected vulns fixes

[HardMax71]

---

Summary by cubic

Bumped backend dependencies to patch detected security vulnerabilities and keep them current. Marked the flaky concurrency e2e test as xfail to reduce CI noise; no production code changes.

• Dependencies
  • pyasn1: 0.6.1 → 0.6.2
  • urllib3: 2.6.2 → 2.6.3
  • Werkzeug: 3.1.4 → 3.1.5

^{Written for commit f242593. Summary will update on new commits.}

Summary by CodeRabbit

• Chores
  • Updated backend dependencies to latest patch versions for improved stability and security.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

Updates three dependency versions in backend/pyproject.toml: pyasn1 (0.6.1 → 0.6.2), urllib3 (2.6.2 → 2.6.3), and Werkzeug (3.1.4 → 3.1.5). No functional code changes or API modifications.

Changes

Cohort / File(s)	Summary
Dependency Version Updates backend/pyproject.toml	Bumped three dependency versions: pyasn1 (0.6.1→0.6.2), urllib3 (2.6.2→2.6.3), and Werkzeug (3.1.4→3.1.5)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 Three wee versions leap and bound,
Patch by patch, no bugs around,
Werkzeug, urllib, pyasn1 too,
Hopping fresh—dependency stew! ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'detected vulns fixes' is related to the changeset, which updates dependency versions to address security vulnerabilities, but it is vague and uses informal/abbreviated terminology.	Consider using a more specific and professional title such as 'Update dependencies to address security vulnerabilities' or 'Bump pyasn1, urllib3, and Werkzeug to patch versions'.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

No issues found across 2 files

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud