Skip to content

deps: bump requests to 2.33.0 - #10

Open
katsugtgz wants to merge 1 commit into
pnlong:mainfrom
katsugtgz:deps/requests-2.33.0
Open

katsugtgz wants to merge 1 commit into
pnlong:mainfrom
katsugtgz:deps/requests-2.33.0

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates requests to 2.33.0 to clear the advisories reported for the pinned 2.32.3.

Evidence:

Validation:

  • osv-scanner no longer reports those advisories for requests 2.33.0
  • pip check passes with requests 2.33.0 installed alongside the repo's pinned urllib3 2.2.2, charset-normalizer 3.3.2, idna 3.7, certifi 2024.8.30
  • full pip install -r requirements.txt does not resolve on a clean environment even before this change (mkl_fft==1.3.10 has no matching distribution outside conda), so the conda env from environment.yml remains the primary install path and is untouched

Scope: requirements.txt only.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant