(superset) branch master updated: chore(deps): bump mako from 1.4.1 to 1.4.3 (#45188)

[ru...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/master by this push:
     new 0ad650c507e chore(deps): bump mako from 1.4.1 to 1.4.3 (#45188)
0ad650c507e is described below

commit 0ad650c507e7ed2048a480dbd383c856a94e10d9
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Sun Oct 11 09:55:26 2026 -0700

    chore(deps): bump mako from 1.4.1 to 1.4.3 (#45188)
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Signed-off-by: github-actions[bot] <41...@users.noreply.github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    Co-authored-by: github-actions[bot] <41...@users.noreply.github.com>
---
 pyproject.toml               | 2 +-
 requirements/base.in         | 2 +-
 requirements/base.txt        | 2 +-
 requirements/development.txt | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index a5a5cc36818..3088b550055 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -75,7 +75,7 @@ dependencies = [
     "humanize",
     "isodate",
     "jsonpath-ng>=1.8.0, <2",
-    "Mako>=1.4.1",
+    "Mako>=1.4.3",
     "markdown>=3.11",
     # marshmallow 4 compatibility: see superset/marshmallow_compatibility.py for a
     # Flask-AppBuilder workaround. Tracking issue:
diff --git a/requirements/base.in b/requirements/base.in
index 9b2014feff3..076297acbbf 100644
--- a/requirements/base.in
+++ b/requirements/base.in
@@ -28,7 +28,7 @@ numexpr>=2.9.0
 # Security: CVE-2026-34073 (MEDIUM) - Improper Certificate Validation
 cryptography>=50.0.2,<51.0.0
 # Security: Snyk - XSS vulnerability in Mako templates
-mako>=1.4.1,<2.0.0
+mako>=1.4.3,<2.0.0
 # Security: CVE-2024-52338 (CRITICAL) - Deserialization of untrusted data in IPC/Parquet readers
 pyarrow>=25.0.1,<26.0.0
 # Security: CVE-2026-27459 - pyopenssl certificate validation
diff --git a/requirements/base.txt b/requirements/base.txt
index 13eea47832e..bc529ea4058 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -207,7 +207,7 @@ kombu==5.6.2
     # via celery
 limits==5.1.0
     # via flask-limiter
-mako==1.4.1
+mako==1.4.3
     # via
     #   -r requirements/base.in
     #   apache-superset (pyproject.toml)
diff --git a/requirements/development.txt b/requirements/development.txt
index b7ba167ade1..4da7c76d34e 100644
--- a/requirements/development.txt
+++ b/requirements/development.txt
@@ -563,7 +563,7 @@ lz4==4.4.5
     # via
     #   clickhouse-connect
     #   trino
-mako==1.4.1
+mako==1.4.3
     # via
     #   -c requirements/base-constraint.txt
     #   alembic