build: bump urllib3
Metadata
Current evaluation
Maintainer bepri's PR #256 bumped urllib3 in pyproject.toml (+3/-3, one file) to clear an OSV advisory. Merged as commit f288fec with 2 approvals and all CI checks green.
Resolution: closed resolved
Reason: The PR itself was merged into the main branch as commit f288fec ('build: bump urllib3 (#256)') with two approvals and no failing checks, delivering the urllib3 version bump that resolved the reported OSV.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Bumps urllib3 to resolve an OSV.
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Maintainer bepri's PR #256 bumped urllib3 in pyproject.toml (+3/-3, one file) to clear an OSV advisory. Merged as commit f288fec with 2 approvals and all CI checks green. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #256 in commit f288fec, updating urllib3 to resolve an OSV advisory. All CI checks passed, with approval from two reviewers. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/imagecraft#256 via commit f288fec, updating urllib3 to resolve an OSV vulnerability. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a dependency update bumping urllib3 to resolve an OSV security advisory. The change passed all CI checks and received reviewer approval before integration. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. The maintainer verified lint and test compliance before integration. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/imagecraft#344
(confidence 80%)
Follow-up urllib3 bump for a new OSV advisory, merged as commit 033c84e, same +3/-3 lockfile-only change.
-
Related To:
canonical/imagecraft#164
(confidence 70%)
Earlier maintainer bump of urllib3 (commit 4443100, 'build(autogen): bump urllib3') in the same dependency line.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #165 build: bump urllib3 | craft-grammar | merged | Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed. | |
| #344 build(deps): bump urllib3 | imagecraft | merged | Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green. | |
| #972 build: bump urllib3 | craft-application | merged | PR #972 merged as commit 6e9b7307, raising the urllib3 lower bound in pyproject.toml (now ">=2.8" in uv.lock) to clear an OSV vulnerability; all CI checks passed. | |
| #63 build: bump urllib3 | debcraft | merged | Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks. | |
| #869 build: bump urllib3 | craft-providers | merged | PR #869 (commit 122fd0b) bumped urllib3 in craft-providers to clear an OSV finding; merged by maintainer bepri with approval, despite two unrelated arm64 CI failures. | |
| #159 build: bump urllib3 | craft-grammar | merged | Merged PR #159 (commit f6dd80b) into craft-grammar: a +3/-3 uv.lock-only bump of urllib3 to clear an OSV advisory. Approved by 2 reviewers; all CI green except the Ubuntu 24.04/Py3.10 slow tests. | |
| #74 build: bump urllib3 | debcraft | merged | Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d. | |
| #5912 build: bump urllib3 | snapcraft | merged | Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability. | |
| #5930 build: bump urllib3 | snapcraft | merged | Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability. | |
| #988 build: update urllib3 | craft-application | merged | Merged PR #988 updated urllib3 to resolve an OSV in commit 816951da; all listed CI checks passed. |