From 01b30c81d9ea8c4dff9f37d77ef7a6bb0b650048 Mon Sep 17 00:00:00 2001
From: Brian Greunke <briangreunke@pm.me>
Date: Mon, 19 Oct 2026 20:53:26 -0500
Subject: [PATCH] fix: raise badsecrets and baddns pins in
 attack-surface-management (ENG-8929)

Match the versions bbot 3.0.2 requests (badsecrets~=1.2.1, baddns~=2.4.0).
This resolves Django 5.2.x in place of 4.2.30. Bump version to 2.0.4.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 capabilities/attack-surface-management/capability.yaml | 6 +++---
 capabilities/attack-surface-management/mcp/bbot.py     | 4 ++--
 capabilities/attack-surface-management/pyproject.toml  | 6 +++---
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/capabilities/attack-surface-management/capability.yaml b/capabilities/attack-surface-management/capability.yaml
index 1e757eb..4c31487 100644
--- a/capabilities/attack-surface-management/capability.yaml
+++ b/capabilities/attack-surface-management/capability.yaml
@@ -1,6 +1,6 @@
 schema: 1
 name: attack-surface-management
-version: "2.0.3"
+version: "2.0.4"
 description: >
   External attack surface management with BBOT reconnaissance scanning,
   Neo4j graph database analysis, Shodan internet intelligence, and
@@ -50,8 +50,8 @@ dependencies:
   packages:
     - nmap
   python:
-    - "badsecrets~=0.13.47"
-    - "baddns~=1.12.294"
+    - "badsecrets~=1.2.1"
+    - "baddns~=2.4.0"
     - "bbot"
     - "aiosqlite>=0.21.0"
     - "extractous~=0.3.0"
diff --git a/capabilities/attack-surface-management/mcp/bbot.py b/capabilities/attack-surface-management/mcp/bbot.py
index 6e51cd0..c2c7a9b 100644
--- a/capabilities/attack-surface-management/mcp/bbot.py
+++ b/capabilities/attack-surface-management/mcp/bbot.py
@@ -2,8 +2,8 @@
 # /// script
 # requires-python = ">=3.12"
 # dependencies = [
-#   "badsecrets~=0.13.47",
-#   "baddns~=1.12.294",
+#   "badsecrets~=1.2.1",
+#   "baddns~=2.4.0",
 #   "fastmcp>=2.0",
 #   "neo4j>=5.28.1",
 #   "bbot",
diff --git a/capabilities/attack-surface-management/pyproject.toml b/capabilities/attack-surface-management/pyproject.toml
index d12e547..3d89538 100644
--- a/capabilities/attack-surface-management/pyproject.toml
+++ b/capabilities/attack-surface-management/pyproject.toml
@@ -1,10 +1,10 @@
 [project]
 name = "attack-surface-management"
-version = "2.0.3"
+version = "2.0.4"
 requires-python = ">=3.10"
 dependencies = [
-    "badsecrets~=0.13.47",
-    "baddns~=1.12.294",
+    "badsecrets~=1.2.1",
+    "baddns~=2.4.0",
     "bbot",
     "aiosqlite>=0.21.0",
     "extractous~=0.3.0",