# API Gateway Service Dependencies

# FastAPI
fastapi>=0.121.0
starlette>=0.49.1  # CVE-2025-62727 fix - explicit pin required
uvicorn[standard]>=0.25.0
python-multipart>=0.0.18  # CVE-2024-24762 fix

# gRPC
grpcio==1.68.1
grpcio-tools==1.68.1
protobuf>=5.29.2  # Security update

# Authentication & Security
python-jose[cryptography]==3.4.0  # CVE-2024-33663 fix (algorithm confusion)
cryptography>=42.0.4  # CVE-2024-26130, CVE-2023-50782 fix
passlib[bcrypt]==1.7.4
python-dotenv==1.0.0

# Database
asyncpg==0.29.0
sqlalchemy[asyncio]==2.0.23

# Async
aiohttp>=3.10.11  # CVE-2024-52303, CVE-2024-52304 fix

# Logging
structlog==24.1.0

# Configuration
pydantic>=2.7.0  # Required by FastAPI 0.121+
pydantic-settings>=2.3.0

# Monitoring
prometheus-client==0.19.0
prometheus-fastapi-instrumentator==6.1.0

# Testing
pytest==7.4.3
pytest-asyncio==0.21.1
httpx==0.25.2

