← Back to issue list

build: bump urllib3

View original Github issue

Metadata

Project
snapcraft
Number
#5912
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability.

Resolution: closed resolved

Reason: The approved pull request was merged into snapcraft as commit 99a19a09a, updating urllib3 to address the reported OSV.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps urllib3 to resolve an OSV. --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability.
stealth/space-bunny-alpha — closed resolved Merged PR #5912 (99a19a09a) bumped urllib3 to resolve an OSV vulnerability.
qwen/qwen3.6-35b-a3b — — Merged to bump urllib3 and resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. Updated a single dependency file with minimal changes.
qwen3.6-35b-a3b-mtp-q6 — — Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. The change was authored by maintainer bepri and integrated into the codebase without additional review comments.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#5930 build: bump urllib3 snapcraft merged Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability.
97%
#63 build: bump urllib3 debcraft merged Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks.
95%
#74 build: bump urllib3 debcraft merged Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d.
92%
#1430 build: update urllib3 craft-parts merged Merged PR #1430 (commit 1b60eff6) updated urllib3 to resolve an OSV vulnerability.
92%
#165 build: bump urllib3 craft-grammar merged Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed.
90%
#988 build: update urllib3 craft-application merged Merged PR #988 updated urllib3 to resolve an OSV in commit 816951da; all listed CI checks passed.
89%
#344 build(deps): bump urllib3 imagecraft merged Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.
87%
#972 build: bump urllib3 craft-application merged PR #972 merged as commit 6e9b7307, raising the urllib3 lower bound in pyproject.toml (now ">=2.8" in uv.lock) to clear an OSV vulnerability; all CI checks passed.
86%
#102 build: fix urllib3 osv craft-grammar merged Merged PR #102 in commit c936b0f, fixing an OSV workflow error related to urllib3; all lint, test, policy, and security checks passed.
84%
#256 build: bump urllib3 imagecraft merged Maintainer bepri's PR #256 bumped urllib3 in pyproject.toml (+3/-3, one file) to clear an OSV advisory. Merged as commit f288fec with 2 approvals and all CI checks green.
84%