IBM / python-sdk-core

The python-sdk-core repository contains core functionality required by Python code generated by the IBM OpenAPI SDK Generator.
Apache License 2.0
20 stars 27 forks source link

fix: restrict requests version to newer version to avoid vulnerability #82

Closed rmkeezer closed 3 years ago

rmkeezer commented 3 years ago

The requests library added dependencies that use LGPL in version 2.16. To avoid these we can restrict the library to versions before 2.16

codecov[bot] commented 3 years ago

Codecov Report

Merging #82 (9787662) into master (caac86c) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #82   +/-   ##
=======================================
  Coverage   98.19%   98.19%           
=======================================
  Files          18       18           
  Lines         665      665           
=======================================
  Hits          653      653           
  Misses         12       12           

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update caac86c...9787662. Read the comment docs.

ibm-devx-automation commented 3 years ago

:tada: This PR is included in version 3.3.2 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: