[erj826]

This PR was made with AI assistance.

Vulnerability Fixes

• bump urllib3 2.7.0 -> 2.8.0 (CVE-2026-97687, CVE-2026-97688, CVE-2026-97689)
• bump multidict 6.7.1 -> 6.9.1 (CVE-2026-104874 / GHSA-54p9-h82j-f925), staying on 6.x rather than the 7.0 major
• bump teradatasql 20.0.0.67 -> 20.0.0.69 (rebuilt with Go 1.26.6; note it still embeds golang.org/x/crypto v0.55.0, so CVE-2026-78662 / CVE-2026-56855 remain open until Teradata ships a build with x/crypto >= 0.56.0)

Image rebuild

The remaining OS-level findings against the published adonato/query-exporter image (perl-base, pcre2, openssl, sqlite, gzip, libssh2, glibc, curl, Python 3.14.7, uv 0.12.7) are already fixed by rebuilding with the current Dockerfile. A docker build --pull --target full now yields Debian 13.7, Python 3.14.8, uv 0.12.23, perl-base 5.40.1-6+deb13u1, libpcre2-8-0 10.46-1deb13u3, libssl3t64 3.5.7-1deb13u3, libsqlite3-0 3.46.1-7+deb13u2, gzip 1.13-1+deb13u1, libssh2-1t64 1.11.1-1+deb13u2, libc6 2.41-12+deb13u4. Publishing a new image picks these up.

Testing

• uv lock --check passes; lock diff touches only the three packages above
• unit tests: 234 passed (coverage is 99.73%, same as current main; db.py lines 409-410)
• ty check passes
• built the full image for linux/amd64; MySQLdb, psycopg2, teradatasql, oracledb, pymssql import fine and query-exporter --help runs

[albertodonato]

thanks