containerbuildsystem / atomic-reactor

Simple python library for building docker images.

BSD 3-Clause "New" or "Revised" License

133 stars 61 forks source link

Update requests and urllib3 #2111

Closed mkosiarc closed 2 months ago

mkosiarc commented 2 months ago

Updating requests to 2.32.3 and urllib3 to 1.26.19, patches security vulnerabilites as reported by

https://github.com/containerbuildsystem/atomic-reactor/security/dependabot?q=is%3Aopen+package%3Aurllib3%2Crequests

STONEBLD-2636

Maintainers will complete the following section

[ ] Commit messages are descriptive enough
[ ] Code coverage from testing does not decrease and new code is covered
[ ] Python type annotations added to new code
[ ] JSON/YAML configuration changes are updated in the relevant schema
[ ] Changes to metadata also update the documentation for the metadata
[ ] Pull request has a link to an osbs-docs PR for user documentation updates
[ ] New feature can be disabled from a configuration file

mkosiarc commented 2 months ago

Updated the PR to use 2.32.3 version of requests, as the 2.32.0 version was yanked from PyPi due to other CVEs, see https://pypi.org/project/requests/#history