[Snyk] Security upgrade urllib3 from 2.0.7 to 2.6.0#116
Conversation
…rabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| # Optionally include additional dependencies here | ||
| cloudevents>=1.2.0 | ||
| requests | ||
| urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability |
There was a problem hiding this comment.
The new requirement urllib3>=2.6.0 will fail when building the Cloud Run example because its Dockerfile still uses python:3.7-slim (see examples/cloud_run_cloud_events/Dockerfile line 3). urllib3 2.6.0 and later drop support for Python 3.7, so pip install -r requirements.txt inside that image will error out before the sample can run. Either raise the base image to a supported Python version or pin urllib3 to the latest 3.7-compatible release.
Useful? React with 👍 / 👎.
2 participants
Snyk has created this PR to fix 2 vulnerabilities in the pip dependencies of this project.
Snyk changed the following file(s):
examples/cloud_run_cloud_events/requirements.txtImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling