thejuran/triggarr v2.7.3

Triggarr v2.7.3

on GitHub

Security patch release for a high-severity multipart parser advisory.

Security

• Require python-multipart>=0.0.27 to remediate GHSA-pp6c-gr5w-3c5g / CVE-2026-42561, a denial-of-service issue in multipart part header parsing.
• Refresh uv.lock so locked installs resolve python-multipart 0.0.27.
• Docker installs now enforce the patched dependency floor through pyproject.toml.

Verification

• uv lock --check
• uv run pytest tests/ -x -q — 879 passed
• uv run ruff check triggarr/ tests/
• uv run --with build python -m build
• docker build -t triggarr:v2.7.3-local .