[Snyk] Security upgrade urllib3 from 2.0.7 to 2.6.3#121
Conversation
…rabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b89945d2c6
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| # Optionally include additional dependencies here | ||
| cloudevents>=1.2.0 | ||
| requests | ||
| urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability |
There was a problem hiding this comment.
examples/cloud_run_cloud_events/Dockerfile builds this sample on python:3.7-slim, but urllib3 2.6.3’s metadata requires a newer Python version, so pip install -r requirements.txt will fail for the example’s default image. If you need to keep Python 3.7 here, cap urllib3 to the newest version that still supports 3.7 or bump the example’s base image to a compatible Python version.
Useful? React with 👍 / 👎.
2 participants
Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.
Snyk changed the following file(s):
examples/cloud_run_cloud_events/requirements.txtImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.