← Back to issue list

build(deps): resolve OSVs

View original Github issue

Metadata

Project
debcraft
Number
#143
Type
pull request
State
merged
Author
smethnani
Labels
—
Created
Updated
Closed

Current evaluation

Merged in canonical/debcraft#143 as commit 3e9db88, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings. All CI checks passed.

Resolution: closed resolved

Reason: PR #143 was merged as commit 3e9db88. The dependency updates resolved the reported OSV findings and passed all CI checks.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps idna + urllib3 to resolve OSVs Updated idna v3.10 -> v3.18 Updated urllib3 v2.6.3 -> v2.7.0 - [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? ---

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged in canonical/debcraft#143 as commit 3e9db88, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings. All CI checks passed.
stealth/space-bunny-alpha — closed resolved Merged PR #143 as commit 3e9db88, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings.
stealth/space-bunny-alpha — closed resolved Merged in canonical/debcraft#143, updating idna 3.10→3.18 and urllib3 2.6.3→2.7.0 to resolve OSV findings. All CI checks passed.
qwen/qwen3.6-35b-a3b — — Resolved OSV security vulnerabilities by updating idna to v3.18 and urllib3 to v2.7.0. Approved by a reviewer, passed all CI checks, and merged.
qwen3.6-35b-a3b-mtp-q6 — — Merged dependency updates bumping idna to v3.18 and urllib3 to v2.7.0 to resolve open source vulnerabilities. Integrated by maintainer smethnani.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#180 build(deps): resolve OSVs craft-grammar merged Merged #180 in commit 983ae56, updating uv.lock to pytest 9.0.3 from 9.0.2 to resolve OSV findings; all CI checks passed.
78%
#1615 build(deps): bump idna + urllib3 craft-parts merged Merged #1615 in commit dd195de9, updating idna 3.11→3.18 and urllib3 2.6.3→2.7.0 to address reported OSV findings.
78%
#131 build(deps): resolve OSVs debcraft merged Merged as commit 509e420: routine 'build(deps): resolve OSVs' uv.lock update (cryptography 46.0.7, pygments 2.20.0, pytest 9.0.3, requests 2.33.1) that incidentally bumped craft-parts, causing a StepInfo regression.
77%
#1076 build(deps): bump idna, urllib3 craft-application merged Merged idna and urllib3 dependency bumps to address OSV findings; commit 80a58477 records the accepted change.
77%
#247 build(autogen): bump dependencies to resolve OSVs imagecraft merged Merged #247 via commit 603fbc3, updating filelock 3.20.2, fonttools 4.61.1, and urllib3 2.6.2 to resolve OSV warnings; all CI checks passed.
74%
#344 build(deps): bump urllib3 imagecraft merged Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.
74%
#313 build(deps): resolve osvs imagecraft merged Merged in commit 10f3370, updating Pygments and cryptography to resolve OSV findings.
73%
#6265 build(deps): bump idna, urllib3 snapcraft merged Merged idna and urllib3 dependency bumps to address reported OSV vulnerabilities in snapcraft#6265 (commit de6a28a9c).
73%
#1278 build(deps): update deps to resolve OSV vulnerabilities rockcraft merged Merged as f0b08615, updating nine dependencies to address OSV findings and adding scoped python-apt and cryptography scanner exceptions.
73%
#963 build(deps): update lockfile for OSVs craft-providers merged Merged PR canonical/craft-providers#963 by lengau refreshed uv.lock (uv lock -P cryptography -P idna -P pytest -P urllib3) to clear OSV-scanner CI alerts. Related Plucky test fixes landed in #962.
73%