Dependabot opened PR #348 to bump our version of requests, which is only used as a development dependency. Tests on that PR failed due to the dependabot PR not being able to read secrets. This should resolve a moderate severity dependabot alert.
Solution
poetry update requests
Type of Change
[x] Bug fix (non-breaking change which fixes an issue)
Problem
Dependabot opened PR #348 to bump our version of
requests, which is only used as a development dependency. Tests on that PR failed due to the dependabot PR not being able to read secrets. This should resolve a moderate severity dependabot alert.Solution
poetry update requestsType of Change
Test Plan
Tests should still pass.