[Snyk] Security upgrade urllib3 from 2.0.7 to 2.6.3#3
Conversation
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR aims to fix a security vulnerability (SNYK-PYTHON-URLLIB3-14896210) by upgrading urllib3 from version 2.0.7 to 2.6.3.
Changes:
- Adds urllib3>=2.6.3 as an explicit dependency in the generated egg-info requires file
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -1 +1,2 @@ | |||
| requests | |||
| urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability | |||
There was a problem hiding this comment.
This change is being made to a generated file in the egg-info directory, which will be overwritten when the package is reinstalled or rebuilt. The urllib3 dependency should instead be added to the install_requires list in setup.py or to requirements.txt to ensure the change persists. Generated egg-info files are derived from these source files and should not be modified directly.
| urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability |
Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.
Snyk changed the following file(s):
ghostwhisper.egg-info/requires.txtImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.