chore: fix OSV scanner vulnerabilities
Metadata
Current evaluation
Merged canonical/craft-store#383, upgrading idna and urllib3 to patched versions; the OSV-scanner check and all other reported CI checks passed.
Resolution: closed resolved
Reason: PR #383 was approved and merged after updating idna and urllib3 to releases that resolve the reported OSV scanner vulnerabilities.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Upgrades idna and urllib3 to their patched versions to resolve OSV scanner failures.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/craft-store#383, upgrading idna and urllib3 to patched versions; the OSV-scanner check and all other reported CI checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/craft-store#383, upgrading idna and urllib3 to patched versions to clear OSV scanner vulnerabilities. | |
| qwen/qwen3.6-35b-a3b | — | — | Upgrades idna and urllib3 to patched versions, resolving OSV scanner vulnerabilities. Merged following approval from two reviewers and successful CI checks. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged an update upgrading idna and urllib3 to patched versions, resolving OSV scanner vulnerabilities. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #143 build(deps): resolve OSVs | debcraft | merged | Merged in canonical/debcraft#143 as commit 3e9db88, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings. All CI checks passed. |