Skip to content

ROB-429 CVEminator 🤖 2026-06-23#23

Merged
RoiGlinik merged 1 commit into
mainfrom
ROB-429-cveminator-2026-06-23
Jun 23, 2026
Merged

ROB-429 CVEminator 🤖 2026-06-23#23
RoiGlinik merged 1 commit into
mainfrom
ROB-429-cveminator-2026-06-23

Conversation

@RoiGlinik

Copy link
Copy Markdown
Contributor

Next Steps

After merge, build and release a new image:

# Use ./build_and_push <new-version> to deploy an image with the CVE fix.

Changes

File Change CVE
pyproject.toml requests = "^2.32.2"requests = "^2.33.0" CVE-2026-25645
poetry.lock requests 2.32.4 → 2.34.2 (and transitive re-resolution) CVE-2026-25645

Refs:

Test plan

  • docker build -t robusta-cli-cve-test -f Dockerfile . — builds clean.
  • docker run --rm robusta-cli-cve-test versionrunning with development version from git (0.0.0).
  • docker run --rm --entrypoint python robusta-cli-cve-test -c "import requests; print(requests.__version__)"2.34.2 (≥ 2.33.0, CVE fixed).

Human in the loop

Nothing requiring extra eyes — pure transitive bump on a widely-used HTTP library, no behavior change expected.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@RoiGlinik RoiGlinik merged commit 163c463 into main Jun 23, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants