build(deps): update cryptography, pygments, requests
Metadata
Current evaluation
Merged PR #940 as commit eb8549f, updating cryptography, Pygments, and requests to resolve three OSV warnings.
Resolution: closed resolved
Reason: PR #940 passed all listed checks and was merged into main as commit eb8549f. The dependency updates resolved the three cited OSV warnings.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
Fixes 3 OSV warnings.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #940 as commit eb8549f, updating cryptography, Pygments, and requests to resolve three OSV warnings. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #940 as commit eb8549f, updating cryptography, Pygments, and requests to resolve three OSV security warnings. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Updated cryptography, pygments, and requests dependencies to resolve 3 OSV security warnings. Merged into main. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/craft-providers#938
(confidence 95%)
The author cited merged PR #938 as containing the lint fixes needed for this update.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #313 build(deps): resolve osvs | imagecraft | merged | Merged in commit 10f3370, updating Pygments and cryptography to resolve OSV findings. | |
| #1061 build(deps): bump cryptography | craft-application | merged | Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed. | |
| #1055 build(deps): bump cryptography | craft-application | merged | Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae). | |
| #356 build(deps): bump cryptography | craft-store | merged | Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq. | |
| #909 build(deps): bump cryptography and urllib3 | craft-providers | merged | Merged cryptography and urllib3 dependency updates in PR #909 to resolve OSV findings; landed as commit 922e691. | |
| #937 build(deps): update dependency requests to v2.33.0 [security] (main) | craft-providers | closed | Requests 2.33.0 security update in #937 was superseded by merged PR #940 (commit eb8549f), which also updated cryptography and Pygments to resolve three OSV warnings. | |
| #517 build(deps): bump pygments | starbase | merged | Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning. | |
| #353 build(deps): bump libraries for OSVs | craft-store | merged | Merged dependabot-style PR bumping cryptography 44.0.2→46.0.6, Markdown 3.8→3.10.2 and Pygments 2.19.1→2.20.0 in uv.lock to clear outstanding OSVs (commit 98818d8). | |
| #945 build(deps): resolve OSVs | craft-providers | merged | Merged Dependabot-style OSV remediation PR into main as commit ee7d5be, re-locking pytest and cryptography; final conflict resolution kept main's cryptography 48.0.0. | |
| #177 build(deps): bump pygments | craft-grammar | merged | Merged the Pygments dependency bump in #177 via commit de39544, resolving an OSV warning with all CI checks passing. |