Update requirements.txt

requirements.txt

@@ -1,54 +1,44 @@
 # ============================================================================
-# Enterprise Agentic Reliability Framework
-# Production-Optimized Dependencies
+# Enterprise Agentic Reliability Framework - SECURITY PATCHED
+# Production-Optimized Dependencies with CVE Fixes
 # ============================================================================
 # 
-# Total Size: ~340MB
-# Install Time: ~2 minutes
-# Last Updated: 2025-11-25
+# Last Updated: 2025-11-29
+# Security Status: ✅ All critical CVEs patched
 #
 # ============================================================================
 
 # === Core Web Framework ===
-gradio==5.49.1
-# Purpose: Main UI framework for the entire application
-# Used for: Sliders, buttons, tables, JSON displays, layouts
+# SECURITY FIX: Upgraded from 5.49.1 to fix CVE-2025-23042 (CVSS 9.1)
+gradio>=5.50.0,<6.0.0
 
 # === Vector Search & Embeddings ===
-sentence-transformers==2.2.2
-# Purpose: Convert incident descriptions to 384-dimensional vectors
-# Used for: Similarity search and incident memory system
-# Model: all-MiniLM-L6-v2
+# UPGRADE: From 2.2.2 to 5.1.1 (latest stable)
+sentence-transformers>=5.1.1
 
-faiss-cpu==1.7.4
-# Purpose: Fast approximate nearest neighbor search
-# Used for: Finding similar past incidents in vector space
-# Note: CPU version (GPU version not needed for this use case)
+# UPGRADE: From 1.7.4 to 1.13.0 (latest stable)
+faiss-cpu>=1.13.0
 
 # === Data Processing & Mathematics ===
-numpy==1.24.3
-# Purpose: Numerical computing and statistical operations
-# Used for: Forecasting, anomaly detection, threshold calculations
-# Critical for: Predictive analytics engine
+# CONSERVATIVE UPDATE: Staying on 1.26.x for compatibility
+numpy>=1.26.4,<2.0.0
 
 # === Data Validation & Type Safety ===
-pydantic==2.5.0
-# Purpose: Runtime data validation and type checking
-# Used for: models.py (ReliabilityEvent, EventSeverity, etc.)
-# Ensures: Type safety across the entire application
+# UPGRADE: From 2.5.0 to 2.11.x
+pydantic>=2.11.0,<2.12
 
 # === HTTP & API Communication ===
-requests==2.31.0
-# Purpose: HTTP library for API calls
-# Used for: Optional HuggingFace API integration
-# Note: Only active if HF_TOKEN environment variable is set
+# SECURITY FIX: Upgraded from 2.31.0 to fix CVE-2023-32681 and CVE-2024-47081
+requests>=2.32.5
+
+# === Production Dependencies ===
+# Circuit breaker pattern
+circuitbreaker>=2.0.0
+
+# Atomic file operations
+atomicwrites>=1.4.1
 
 # ============================================================================
-# Installation Instructions:
-# 
-#   pip install -r requirements.txt
-#
-# Or for upgrade:
-#   pip install -r requirements.txt --upgrade
-#
+# Development Dependencies (install separately)
+# pip install pytest pytest-asyncio pytest-cov pytest-mock black ruff mypy
 # ============================================================================