Upgrade requests Version to Resolve Security Vulnerability
#6
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
hyoussef79
approved these changes
Jun 10, 2024
evansalter
approved these changes
Jun 10, 2024
areezvisram-rewind
deleted the
fix/areezvisram-rewind/ec-2196-requests-vulnerability
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Jira: Fix Requests
Sessionobject does not verify requests after making first request with verify=FalseDescription of change
Upgrade
requestspackage to 2.32.3 from 2.31.0Dependabot Alert details a security vulnerability in
requestsversions less than 2.32.0, pertaining to verification of requests. This PR upgradesrequeststo 2.32.3 to remove the vulnerability.Some other Python packages were upgraded with this upgrade as shown in the commit.
Testing Performed
Local manual testing by running the
add-user-to-boardscript with the updatedrequestspackage and ensuring the script works and runs as intended.