Update dependency future to v0.18.3 [SECURITY] - autoclosed
Metadata
Current evaluation
Renovate PR #3 was autoclosed without merging after prolonged inactivity, so the future 0.18.3 update for CVE-2022-40899 was not delivered.
Resolution: closed stale
Reason: PR #3 received no review, comments, checks, or further activity and was automatically closed. No resolving commit or merged dependency update was reported.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [future](https://python-future.org) | `==0.18.2` -> `==0.18.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
### GitHub Vulnerability Alerts
#### [CVE-2022-40899](https://nvd.nist.gov/vuln/detail/CVE-2022-40899)
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. This issue has been patched in version 0.18.3.
---
### Configuration
📅 **Schedule**: Branch creation - "" in timezone Etc/UTC, Automerge - "every weekend" in timezone Etc/UTC.
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/imagecraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | Renovate PR #3 was autoclosed without merging after prolonged inactivity, so the future 0.18.3 update for CVE-2022-40899 was not delivered. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate PR #3 updated future from 0.18.2 to 0.18.3 for CVE-2022-40899, but was autoclosed without merging after receiving no activity. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate PR #887 to update future from 0.18.2 to 0.18.3 for CVE-2022-40899 was autoclosed without merging; no resolution commit was found. | |
| qwen/qwen3.6-35b-a3b | — | — | Renovate autoclosed the security update for future to v0.18.3 without merging. The change was abandoned. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Security update for the future package to v0.18.3 was autoclosed without merging. Automerge was enabled, but the branch closed after inactivity. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #12 Update dependency requests to v2.31.0 [SECURITY] - autoclosed | imagecraft | closed | Renovate's requests 2.28.1→2.31.0 security bump (CVE-2023-32681) got no reviews and was auto-closed as stale after ~993 days unmerged; requests reached 2.33.0 much later via #308 (cbca1c1). | |
| #45 Update dependency certifi to v2024.7.4 [SECURITY] - autoclosed | imagecraft | closed | Renovate's certifi 2024.7.4 security update was autoclosed without merging after prolonged inactivity. | |
| #15 Update dependency certifi to v2023 [SECURITY] - autoclosed | imagecraft | closed | Renovate PR #15 proposed certifi 2023.7.22 for security fixes but was autoclosed unmerged after inactivity; no resolving merge or commit was recorded. | |
| #6125 build(deps): update dependency requests to v2.33.0 [security] (main) - autoclosed | snapcraft | closed | Renovate PR #6125 (requests 2.32.5->2.33.0, CVE-2026-25645) was autoclosed as a duplicate; the same bump was merged via Dependabot PR #6127 in commit fce681014. | |
| #4 Update dependency reportlab to v3.6.13 [SECURITY] - autoclosed | imagecraft | closed | Renovate PR #4 proposed reportlab 3.6.13 for CVE-2023-33733, but was autoclosed unmerged after prolonged inactivity; no resolving commit or successor PR was found. | |
| #11 Update dependency furo to v2023 - autoclosed | craft-application | closed | Renovate PR #11 was autoclosed unmerged; PR #76 later merged the same furo 2023.5.20 update in commit d6c7315d. |