build(deps): loosen requests dependency
Metadata
Current evaluation
Merged PR #491 in commit 63ff3d01, loosening the Requests dependency after its upstream bug was fixed so newer Requests releases can be used.
Resolution: closed resolved
Reason: PR #491 was approved with no unresolved comments and merged as commit 63ff3d01. Its one-file dependency change removes the tighter Requests constraint now that the relevant upstream bug is fixed.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `tox`?
-----
The relevant requests bug has been fixed, and this combines with upstream changes to let us use a newer requests.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #491 in commit 63ff3d01, loosening the Requests dependency after its upstream bug was fixed so newer Requests releases can be used. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/craft-application#491 loosened the requests dependency to allow newer releases after the relevant upstream bug was fixed; approval completed with no unresolved comments. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after approval and passing CI. Loosened the requests dependency to support a newer version, enabled by an upstream bug fix and related changes. Updated one file with minimal diffs. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #514 fix: loosen requests dependency | craft-application | merged | Merged PR #514 relaxed the requests dependency, fixing #511 by avoiding the 2.32.0+ requirement; released in craft-application 4.2.7. | |
| #5553 build(deps): bump requests to 2.32.4 | snapcraft | merged | Merged PR #5553 as commit 3cfe7a1a3, upgrading requests to 2.32.4 and setting it as the minimum version to mitigate a CVE. | |
| #505 build(deps): unpin requests, release 4.2.6 | craft-application | merged | Merged in PR #505 (commit 8236c3d3) and released as 4.2.6, removing the requests<2.32.0 constraint to address CVE-2024-35195. | |
| #663 build(deps): replace requests-unixsocket with requests-unixsocket2 | craft-providers | merged | Merged PR #663, replacing requests-unixsocket with requests-unixsocket2; commit fe786e8 updated the dependency. | |
| #122 build(deps): bump requests from 2.32.5 to 2.33.0 | starflow | merged | Updated requests from 2.32.5 to 2.33.0; PR #122 was merged as commit cf593d0 after two approvals and with all CI checks passing. | |
| #649 build(deps): update dependency requests to <2.33 | craft-providers | closed | Closed unmerged because requests 2.32 was incompatible with requests-unixsocket; Renovate ignored the <2.33 update pending a newer release. | |
| #681 build(deps): update dependency types-requests to v2.32.0.20240914 (main) | craft-providers | merged | Merged PR #681 updated types-requests from 2.31.0.6 to 2.32.0.20240914 via commit 16a4ede. |