← Back to issue list

requirements: pin urllib3 version to prevent request problems

View original Github issue

Metadata

Project
craft-parts
Number
#440
Type
pull request
State
merged
Author
cmatsuoka
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #440 (commit 15aa1c54), pinning urllib3 to avoid request failures and adding a pyright workaround for an XDG dependency deadlock.

Resolution: closed resolved

Reason: PR #440 was approved and merged. Commit 15aa1c54 records the urllib3 pin and pyright workaround.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #440 (commit 15aa1c54), pinning urllib3 to avoid request failures and adding a pyright workaround for an XDG dependency deadlock.
stealth/space-bunny-alpha — closed resolved Merged craft-parts#440 pinned urllib3 to prevent request failures and added a pyright workaround to avoid an XDG dependency deadlock.
stealth/space-bunny-alpha — closed resolved Merged PR #440 pinned urllib3 to 1.26 to prevent request problems and added a Pyright workaround to avoid an xdg dependency deadlock.
qwen/qwen3.6-35b-a3b — — Merged. Pins urllib3 version to prevent request issues and includes a pyright workaround to resolve xdg dependency deadlock. Approved with passing CI checks.
qwen3.6-35b-a3b-mtp-q6 — — Merged changes pinning urllib3 to prevent request issues and adding a pyxdg pyright workaround to resolve dependency deadlocks. Updates address compatibility concerns raised during review.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#264 deps: pin urllib3 to v1.x craft-providers merged Merged PR #264 pins urllib3 to v1.x in craft-providers, mirroring the equivalent craft-parts PR #440 (commit 15aa1c54) to avoid request/dependency problems.
79%
#165 build: bump urllib3 craft-grammar merged Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed.
71%
#63 build: bump urllib3 debcraft merged Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks.
71%
#1408 fix(deps): update urllib3 to 2.5.1 to address security vulnerabilities craft-parts closed Closed unmerged; the urllib3 security update was superseded by merged PR #1411 (commit 044ea761), which upgraded uv.lock from urllib3 2.5.0 to 2.6.1.
70%
#74 build: bump urllib3 debcraft merged Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d.
70%