Skip to content

chore!: update requests to >=2.33.1 for CVE-2026-25645#107

Merged
andreas-karlsson merged 2 commits intomainfrom
update-requests
Apr 9, 2026
Merged

chore!: update requests to >=2.33.1 for CVE-2026-25645#107
andreas-karlsson merged 2 commits intomainfrom
update-requests

Conversation

@andreas-karlsson
Copy link
Copy Markdown
Contributor

@andreas-karlsson andreas-karlsson commented Apr 9, 2026

Summary

  • Update requests from ==2.32.4 to >=2.33.1,<3.0.0 to address CVE-2026-25645
  • Drop Python 3.9 support (EOL, and requests 2.33+ requires 3.10+)
  • Fix pre-existing dubious ownership error in container-based CI builds

Breaking Changes

  • Minimum Python version is now 3.10

🤖 Generated with Claude Code

andreas-karlsson and others added 2 commits April 9, 2026 11:49
BREAKING CHANGE: Dropped support for Python 3.9

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
setuptools_scm runs git during pip install, which fails inside
Docker containers where the checkout user differs from the
container user. Adding safe.directory before install resolves this.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@andreas-karlsson andreas-karlsson merged commit 2d27b72 into main Apr 9, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants