ci: upgrade flask
Metadata
Current evaluation
Merged #1471 as commit 32c8a633, upgrading Flask in CI to address an OSV vulnerability.
Resolution: closed resolved
Reason: PR #1471 was approved and merged as commit 32c8a633; its one-line Flask update cleared the OSV security finding.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
- [x] Have you added an entry to the changelog (`docs/reference/changelog.rst`)?
---
Resolves an osv. An alternative could be to skip test directories for osv scanning
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged #1471 as commit 32c8a633, upgrading Flask in CI to address an OSV vulnerability. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #1471 (commit 32c8a633), upgrading Flask in CI to address an OSV vulnerability. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged to upgrade Flask and resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. Updates the CI dependency version to address the security advisory without skipping test directories. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged upgrade of the Flask dependency to resolve an OSV. The change updates the CI environment, passes all lint and test checks, and includes a changelog entry. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/craft-parts#1498
(confidence 98%)
Later merged the alternative approach of excluding integration tests from OSV-Scanner inputs.
Related issues
No related issues found above the similarity threshold.