From 907fe39b730c5dccfdaca82b500d7febcf4fcf4a Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 20:07:12 +0000
Subject: [PATCH] chore(deps): bump gitpython to 3.1.54 and postcss to 8.5.18
 for osv-scan

Fixes #34530
---
 ui/litellm-dashboard/package-lock.json | 10 +++++-----
 ui/litellm-dashboard/package.json      |  4 ++--
 uv.lock                                |  6 +++---
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/ui/litellm-dashboard/package-lock.json b/ui/litellm-dashboard/package-lock.json
index 5f6b4b889b1..ddb73ee81d6 100644
--- a/ui/litellm-dashboard/package-lock.json
+++ b/ui/litellm-dashboard/package-lock.json
@@ -67,7 +67,7 @@
         "jsdom": "27.4.0",
         "knip": "5.83.1",
         "openapi-typescript": "7.13.0",
-        "postcss": "8.5.13",
+        "postcss": "8.5.18",
         "prettier": "3.2.5",
         "tailwindcss": "4.3.2",
         "tw-animate-css": "1.4.0",
@@ -11064,9 +11064,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.13",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.13.tgz",
-      "integrity": "sha512-qif0+jGGZoLWdHey3UFHHWP0H7Gbmsk8T5VEqyYFbWqPr1XqvLGBbk/sl8V5exGmcYJklJOhOQq1pV9IcsiFag==",
+      "version": "8.5.18",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.18.tgz",
+      "integrity": "sha512-xdB1oSLHbz1vRWgCDalrCqEFTWzFlhqFC5tIHLMOSUIjhm3XXQ1qrFy8S/ESr1JYRRXqM3c1QFiMZUJdUTqyMQ==",
       "funding": [
         {
           "type": "opencollective",
@@ -11083,7 +11083,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.11",
+        "nanoid": "^3.3.12",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
diff --git a/ui/litellm-dashboard/package.json b/ui/litellm-dashboard/package.json
index 63bcdfb6076..dbc2f345588 100644
--- a/ui/litellm-dashboard/package.json
+++ b/ui/litellm-dashboard/package.json
@@ -79,7 +79,7 @@
     "jsdom": "27.4.0",
     "knip": "5.83.1",
     "openapi-typescript": "7.13.0",
-    "postcss": "8.5.13",
+    "postcss": "8.5.18",
     "prettier": "3.2.5",
     "tailwindcss": "4.3.2",
     "tw-animate-css": "1.4.0",
@@ -96,7 +96,7 @@
     "ws": "8.21.0",
     "braces": "3.0.3",
     "axios": "1.13.6",
-    "postcss": "8.5.13",
+    "postcss": "8.5.18",
     "esbuild": "0.28.1",
     "date-fns": "^4.4.0",
     "sharp": "^0.35.0"
diff --git a/uv.lock b/uv.lock
index 70cae50838c..a706b999656 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2378,14 +2378,14 @@ wheels = [
 
 [[package]]
 name = "gitpython"
-version = "3.1.52"
+version = "3.1.54"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "gitdb" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/e5/fd/df0bafa4eb5ea2f51e1adee9f7a94c8e62c5d180e65117045dfca3439c8a/gitpython-3.1.52.tar.gz", hash = "sha256:de0a8ad86274c6e75ae8b37dd055ba68f19818c813108642263227b20775b48e", size = 223726, upload-time = "2026-07-16T03:15:59.599Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5e/d5/3da0b92033887033f4c27f2dd109a303c4ca62813c7b3bb2511edb4777de/gitpython-3.1.54.tar.gz", hash = "sha256:53f2085e24a2cda300eed7c3fc5f1559ae289634b725e98acaf4791940247aa0", size = 225076, upload-time = "2026-07-22T04:08:51.403Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/8d/90/04dff7c1e176bb1c3011ef1647393d368790da710d8dde1cdcfad301f45a/gitpython-3.1.52-py3-none-any.whl", hash = "sha256:79a36ee1f83523214a3f72d56cf1c4e490d577dc61af77e43dfe5862bd9da01a", size = 215366, upload-time = "2026-07-16T03:15:58.239Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/b9/876f442a28df5c068ca69b0122d5c35e65fd2d2fa9992ea5cb5944ea00a6/gitpython-3.1.54-py3-none-any.whl", hash = "sha256:b90d7b3d9bc0238681d24369130826f0dcdb0ceaa45db67cf1d4ffa4c302dedf", size = 216575, upload-time = "2026-07-22T04:08:50.050Z" },
 ]
 
 [[package]]