← Back to issue list

build(deps): bump idna + urllib3

View original Github issue

Metadata

Project
craft-parts
Number
#1615
Type
pull request
State
merged
Author
smethnani
Labels
—
Created
Updated
Closed

Current evaluation

Merged dependency update bumping idna to v3.18 and urllib3 to v2.7.0 to resolve open source vulnerabilities. Approved by two reviewers and passed CI checks.

Suggested action: —

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? - [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? --- Resolves OSVs ``` Updated idna v3.11 -> v3.18 Updated urllib3 v2.6.3 -> v2.7.0 ```

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged dependency update bumping idna to v3.18 and urllib3 to v2.7.0 to resolve open source vulnerabilities. Approved by two reviewers and passed CI checks.
qwen3.6-35b-a3b-mtp-q6 — — Merged dependency update bumping idna to 3.18 and urllib3 to 2.7.0 to resolve associated OSVs.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#6265 build(deps): bump idna, urllib3 snapcraft merged Merged a dependency update bumping idna and urllib3 to resolve OSV security vulnerabilities. Approved by two reviewers and successfully passed CI checks.
95%
#1076 build(deps): bump idna, urllib3 craft-application merged Merged dependency update bumping idna and urllib3 to resolve OSV security vulnerabilities. Approved by one reviewer with all CI checks passing. The change modifies a single file with minimal adjustments.
93%
#344 build(deps): bump urllib3 imagecraft merged Merged to bump urllib3 and resolve an OSV. Approved by two reviewers with all CI checks passing. The update modifies a single file with three additions and three deletions.
85%
#5930 build: bump urllib3 snapcraft merged Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. Approved by two reviewers and integrated after passing CI checks.
83%
#108 build(deps): bump urllib3 from 2.5.0 to 2.6.3 starflow merged Merged a Dependabot PR bumping urllib3 from 2.5.0 to 2.6.3. The update patches critical decompression bomb and DoS vulnerabilities, plus bug fixes. Approved by reviewers, passed all CI checks, and merged successfully.
82%
#4388 build(deps): bump urllib3 from 1.26.15 to 1.26.17 snapcraft merged Merged Dependabot PR bumping urllib3 from 1.26.15 to 1.26.17. Update applies security patch GHSA-v845-jxx5-vc9f and fixes a PoolManager thread-safety issue. Approved by two reviewers, passed CI, and maintained coverage.
82%
#5912 build: bump urllib3 snapcraft merged Merged to bump urllib3 and resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. Updated a single dependency file with minimal changes.
82%
#165 build: bump urllib3 craft-grammar merged Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. The change modifies a single file.
82%
#363 build(deps): bump urllib3 from 1.26.4 to 1.26.5 charmcraft merged Merged Dependabot update bumping urllib3 from 1.26.4 to 1.26.5. The release fixes Python 3.10 deprecation warnings, updates vendored six, and optimizes URL parsing. Approved by two reviewers and passed CI checks prior to merge.
82%
#972 build: bump urllib3 craft-application merged Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. The change updated the package version in a single file.
82%