From 0c0d60036601c74c0df3f4ba72b60a93a8c05e7e Mon Sep 17 00:00:00 2001
From: katsugtgz <katsugtgz@users.noreply.github.com>
Date: Sat, 17 Oct 2026 01:23:51 +0700
Subject: [PATCH] Bump strawberry-graphql from 0.324.0 to 0.327.7

Clears GHSA-pfvf-fwfp-25mp (PYSEC-2026-4303) and GHSA-m952-2w3f-6r8h
(PYSEC-2026-4302). osv-scanner no longer reports any advisory for
strawberry-graphql on the updated lockfile.
---
 backend/pyproject.toml | 2 +-
 backend/uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 92b08ec609..4cd9a881ab 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -67,7 +67,7 @@ dependencies = [
     "django-queryinspect<2.0.0,>=1.1.0",
     "lxml==6.1.0",
     "unidecode<2.0.0,>=1.1.1",
-    "strawberry-graphql==0.324.0",
+    "strawberry-graphql==0.327.7",
     "strawberry-graphql-django==0.87.0",
     "Werkzeug>=1.0.1,<4.0.0",
     "django-import-export<4.0.0,>=3.2.0",
diff --git a/backend/uv.lock b/backend/uv.lock
index 5939da05d3..b3422e1e50 100644
--- a/backend/uv.lock
+++ b/backend/uv.lock
@@ -291,7 +291,7 @@ requires-dist = [
     { name = "scikit-learn", specifier = ">=1.5.0" },
     { name = "sentence-transformers", specifier = ">=3.0.0" },
     { name = "sentry-sdk", specifier = ">=2.14.0" },
-    { name = "strawberry-graphql", specifier = "==0.324.0" },
+    { name = "strawberry-graphql", specifier = "==0.327.7" },
     { name = "strawberry-graphql-django", specifier = "==0.87.0" },
     { name = "stripe", specifier = "==10.5.0" },
     { name = "tinycss2", specifier = ">=1.4.0" },
@@ -3310,7 +3310,7 @@ wheels = [
 
 [[package]]
 name = "strawberry-graphql"
-version = "0.324.0"
+version = "0.327.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cross-web" },
@@ -3319,9 +3319,9 @@ dependencies = [
     { name = "python-dateutil" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/6b/f9/7e121f55c93864cbedf2bbcf8920e2456da3adf05d9f3eef101db6633fec/strawberry_graphql-0.324.0.tar.gz", hash = "sha256:4eb6decf0c33524374f24e07ff6d1915da26655a49fa6f656544c293404e2d35", size = 235911, upload-time = "2026-08-10T15:05:44.494Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/03/dd/928852c07ceb4881281bd1d9472f11d2bbe1ccb5b400f1aba2529a754f53/strawberry_graphql-0.327.7.tar.gz", hash = "sha256:b84f968f8753037508c8f370b8c64da408e3bf759553d6e814a5a4dc88152fb2", size = 243869, upload-time = "2026-09-07T19:36:24.934Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/56/52b78a3e8de057aadc42f61c82727a914fbb95accc6aae1b5ff0d54e43c9/strawberry_graphql-0.324.0-py3-none-any.whl", hash = "sha256:08c8b3256a1c909c7721f3c1d8e161ac40505ca14991c39d8492898b17e77b6d", size = 338683, upload-time = "2026-08-10T15:05:42.564Z" },
+    { url = "https://files.pythonhosted.org/packages/0d/09/e0deac5d4f466f6ecae1b91a91d1a291aad1890960a5d891bb80bda3425c/strawberry_graphql-0.327.7-py3-none-any.whl", hash = "sha256:0c653f16fe2a35b5a672fb5492cee5243a2f44f209247a946eddc1a6399b2284", size = 347817, upload-time = "2026-09-07T19:36:22.775Z" },
 ]
 
 [[package]]