← Back to issue list

build(deps): bump dependencies for OSV warnings

View original Github issue

Metadata

Project
craft-parts
Number
#1791
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #1791 bumping certifi and urllib3 to resolve OSV security warnings.

Resolution: closed resolved

Reason: The PR was merged, updating certifi and urllib3 dependencies to address OSV security warnings.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps certifi and urllib3 to resolve OSVs. --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/craft-parts/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — closed resolved Merged PR #1791 bumping certifi and urllib3 to resolve OSV security warnings.

Update history

Date Change
merged
updated
created

Related issues

Issue Project State Summary Similarity
#344 build(deps): bump urllib3 imagecraft merged Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.
82%
#74 build: bump urllib3 debcraft merged Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d.
80%
#165 build: bump urllib3 craft-grammar merged Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed.
79%
#6512 build(deps): bump certifi to 2026.10.19 snapcraft merged Bump certifi dependency to 2026.10.19 to resolve an OSV vulnerability. Merged into main.
79%
#909 build(deps): bump cryptography and urllib3 craft-providers merged Merged cryptography and urllib3 dependency updates in PR #909 to resolve OSV findings; landed as commit 922e691.
79%
#1753 build(deps): bump urllib3 to 2.8.0 craft-parts merged Merged PR #1753 bumps urllib3 from 2.7.0 to 2.8.0 in uv.lock to resolve OSV security findings, preparing for #1728.
79%
#454 build(deps): update dependency certifi to v2026.10.23 craft-store merged Merged PR #454 updates certifi to v2026.10.23 in uv.lock to resolve a critical OSV security scan failure.
78%
#5912 build: bump urllib3 snapcraft merged Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability.
77%
#63 build: bump urllib3 debcraft merged Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks.
76%
#1076 build(deps): bump idna, urllib3 craft-application merged Merged idna and urllib3 dependency bumps to address OSV findings; commit 80a58477 records the accepted change.
76%