Skip to content

deps: bump requests to 2.33.0 - #152

Open
katsugtgz wants to merge 1 commit into
calpaterson:mainfrom
katsugtgz:deps/requests-2.33.0
Open

katsugtgz wants to merge 1 commit into
calpaterson:mainfrom
katsugtgz:deps/requests-2.33.0

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates requests to 2.33.0 to clear the advisories reported for the pinned 2.32.3. This goes further than the open dependabot PR #148 (2.32.4), which still sits inside both affected ranges.

Evidence:

Validation:

  • osv-scanner no longer reports those advisories for requests 2.33.0
  • pip check passes with requests 2.33.0 and the repo's other pins
  • the full pip install -r requirements.txt fails on this machine at systemd-python (needs libsystemd-dev, an OS package), before and after this change; that failure is unrelated to requests

Scope: requirements.txt only.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant