Bump uvicorn from 0.34.0 to 0.42.0 #6

	name: Server Security

	on:
	push:
	branches:
	- main
	pull_request:

	jobs:
	test-and-audit:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt
	pip install pip-audit

	- name: Run tests
	run: python -m pytest -q

	- name: Audit Python dependencies
	run: pip-audit

	- name: Trivy filesystem scan
	uses: aquasecurity/trivy-action@0.28.0
	with:
	scan-type: fs
	ignore-unfixed: true
	severity: CRITICAL,HIGH
	format: table
	exit-code: "1"

Provide feedback