← Back to issue list

build: bump urllib3

View original Github issue

Metadata

Project
snapcraft
Number
#5930
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability.

Resolution: closed resolved

Reason: The urllib3 security update was approved and merged into Snapcraft as commit a473ada2c, resolving the reported OSV finding.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Bumps urllib3 to resolve an OSV. --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #5930 as commit a473ada2c, bumping urllib3 to address an OSV vulnerability.
stealth/space-bunny-alpha — closed resolved Merged PR #5912 (commit 99a19a09a), bumping urllib3 to address an OSV vulnerability.
qwen/qwen3.6-35b-a3b — — Merged a dependency update bumping urllib3 to resolve an OSV vulnerability. Approved by two reviewers and integrated after passing CI checks.
qwen3.6-35b-a3b-mtp-q6 — — Merged a dependency update to bump urllib3, resolving an Open Source Vulnerability. The maintainer-authored change passed linting and testing checks before integration.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/snapcraft#5912 (confidence 90%)

    Earlier PR #5912, commit 99a19a09a, made a similarly titled urllib3 update for an OSV; #5930 landed separately as a473ada2c.

Related issues

Issue Project State Summary Similarity
#5912 build: bump urllib3 snapcraft merged Merged PR #5912 (commit 99a19a09a) bumped urllib3 to resolve an OSV vulnerability.
97%
#63 build: bump urllib3 debcraft merged Merged PR #63 updated urllib3 to resolve an OSV vulnerability; commit 5f83429 passed all CI checks.
93%
#74 build: bump urllib3 debcraft merged Merged PR #74 bumped urllib3 to resolve an OSV security warning; the change landed in commit 8eb280d.
91%
#1430 build: update urllib3 craft-parts merged Merged PR #1430 (commit 1b60eff6) updated urllib3 to resolve an OSV vulnerability.
90%
#165 build: bump urllib3 craft-grammar merged Merged PR #165 as commit 9deba2e, bumping urllib3 in a one-file lock update to resolve an OSV advisory; all CI checks passed.
89%
#988 build: update urllib3 craft-application merged Merged PR #988 updated urllib3 to resolve an OSV in commit 816951da; all listed CI checks passed.
87%
#344 build(deps): bump urllib3 imagecraft merged Merged urllib3 dependency bump (uv.lock, +3/-3) fixing an OSV advisory; commit 033c84e landed PR #344 with 2 approvals and all CI checks green.
85%
#972 build: bump urllib3 craft-application merged PR #972 merged as commit 6e9b7307, raising the urllib3 lower bound in pyproject.toml (now ">=2.8" in uv.lock) to clear an OSV vulnerability; all CI checks passed.
85%
#159 build: bump urllib3 craft-grammar merged Merged PR #159 (commit f6dd80b) into craft-grammar: a +3/-3 uv.lock-only bump of urllib3 to clear an OSV advisory. Approved by 2 reviewers; all CI green except the Ubuntu 24.04/Py3.10 slow tests.
83%
#256 build: bump urllib3 imagecraft merged Maintainer bepri's PR #256 bumped urllib3 in pyproject.toml (+3/-3, one file) to clear an OSV advisory. Merged as commit f288fec with 2 approvals and all CI checks green.
83%