build(deps): bump cryptography and urllib3
Metadata
Current evaluation
Merged cryptography and urllib3 dependency updates in PR #909 to resolve OSV findings; landed as commit 922e691.
Resolution: closed resolved
Reason: PR #909 passed all listed CI checks and was merged as commit 922e691, updating the lockfile to address the reported cryptography and urllib3 OSV findings.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
Bumps cryptography and urllib3 to resolve OSVs
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged cryptography and urllib3 dependency updates in PR #909 to resolve OSV findings; landed as commit 922e691. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/craft-providers#909 via commit 922e691, updating cryptography and urllib3 to resolve OSV security findings. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged PR bumping cryptography and urllib3 dependencies to resolve OSV security vulnerabilities. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #344 build(deps): bump urllib3 | imagecraft | merged | Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green. | |
| #220 build(deps): update urllib3 to 2.8.0 | craft-grammar | merged | Merged PR #220 updating urllib3 from 2.7.0 to 2.8.0 to address three OSV security vulnerabilities (PYSEC-2026-4175/4176/4177). | |
| #74 build: bump urllib3 | debcraft | merged | Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d. | |
| #1753 build(deps): bump urllib3 to 2.8.0 | craft-parts | merged | Merged PR #1753 bumps urllib3 from 2.7.0 to 2.8.0 in uv.lock to resolve OSV security findings, preparing for #1728. | |
| #63 build: bump urllib3 | debcraft | merged | Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks. | |
| #165 build: bump urllib3 | craft-grammar | merged | Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed. | |
| #5912 build: bump urllib3 | snapcraft | merged | Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability. | |
| #5930 build: bump urllib3 | snapcraft | merged | Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability. | |
| #988 build: update urllib3 | craft-application | merged | Merged PR #988 updated urllib3 to resolve an OSV in commit 816951da; all listed CI checks passed. | |
| #1061 build(deps): bump cryptography | craft-application | merged | Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed. |