← Back to issue list

build(deps): bump urllib3

View original Github issue

Metadata

Project
imagecraft
Number
#344
Type
pull request
State
merged
Author
smethnani
Labels
—
Created
Updated
Closed

Current evaluation

Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.

Resolution: closed resolved

Reason: The PR itself was merged into main as commit 033c84e ("build(deps): bump urllib3 (#344)"), updating the lock file's urllib3 entry after reviewer approval (2 reviewers, 0 unresolved comments) and with all spread/test/lint/OSV-scanner/Trivy/CLA checks passing.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Resolves an osv --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.
stealth/space-bunny-alpha — closed resolved Dependabot-style urllib3 bump merged to clear an OSV advisory; commit 033c84e ("build(deps): bump urllib3 (#344)") updated uv.lock after 2 approvals and all CI/security checks passed.
stealth/space-bunny-alpha — closed resolved Merged urllib3 dependency bump to address an OSV advisory; commit 033c84e landed PR #344 after reviewer approval and all CI checks passed.
qwen/qwen3.6-35b-a3b — — Merged to bump urllib3 and resolve an OSV. Approved by two reviewers with all CI checks passing. The update modifies a single file with three additions and three deletions.
qwen3.6-35b-a3b-mtp-q6 — — Merged a dependency update to bump urllib3, resolving an OSV security vulnerability. The maintainer submitted the change, which was integrated without additional comments.

Update history

No update history recorded yet.

Related work

  • Related To: imagecraft#313 (confidence 72%)

    Earlier commit 10f3370 'build(deps): resolve osvs' — same series of OSV-driven dependency bumps

  • Related To: imagecraft#256 (confidence 65%)

    Prior commit f288fec 'build: bump urllib3' — same dependency bumped earlier for OSV reasons

  • Related To: imagecraft#357 (confidence 55%)

    Commit a868324 'build(deps): bump cryptography and starlette' — other OSV advisory bumps in the lock file

Related issues

Issue Project State Summary Similarity
#165 build: bump urllib3 craft-grammar merged Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed.
92%
#256 build: bump urllib3 imagecraft merged Maintainer bepri's PR #256 bumped urllib3 in pyproject.toml (+3/-3, one file) to clear an OSV advisory. Merged as commit f288fec with 2 approvals and all CI checks green.
88%
#63 build: bump urllib3 debcraft merged Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks.
88%
#74 build: bump urllib3 debcraft merged Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d.
87%
#159 build: bump urllib3 craft-grammar merged Merged PR #159 (commit f6dd80b) into craft-grammar: a +3/-3 uv.lock-only bump of urllib3 to clear an OSV advisory. Approved by 2 reviewers; all CI green except the Ubuntu 24.04/Py3.10 slow tests.
87%
#5912 build: bump urllib3 snapcraft merged Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability.
87%
#1753 build(deps): bump urllib3 to 2.8.0 craft-parts merged Lock-only bump of urllib3 from 2.7.0 to 2.8.0 to resolve OSV security scan failures. Approved by 2 reviewers with 0 unresolved comments. CI has failing OSV-scanner and test-python-plugins checks.
86%
#5930 build: bump urllib3 snapcraft merged Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability.
85%
#972 build: bump urllib3 craft-application merged PR #972 merged as commit 6e9b7307, raising the urllib3 lower bound in pyproject.toml (now ">=2.8" in uv.lock) to clear an OSV vulnerability; all CI checks passed.
84%
#5963 build(deps): bump urllib3 from 2.6.1 to 2.6.3 snapcraft closed Closed unmerged as a duplicate of merged PR #5930, which updated urllib3 to 2.6.3 in commit a473ada2c.
84%