From f73b44abba8daec29ec3f35dc3bda04acbcc5f75 Mon Sep 17 00:00:00 2001 From: Kenneth Kehl <@kkehl@flexion.us> Date: Thu, 19 Jun 2025 07:07:02 -0700 Subject: [PATCH] upgrade to urllib 2.5.0 due to pip audit --- poetry.lock | 8 ++++---- pyproject.toml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index b072e8495..6d0c2c06b 100644 --- a/poetry.lock +++ b/poetry.lock @@ -3784,14 +3784,14 @@ files = [ [[package]] name = "urllib3" -version = "2.4.0" +version = "2.5.0" description = "HTTP library with thread-safe connection pooling, file post, and more." optional = false python-versions = ">=3.9" groups = ["main", "dev"] files = [ - {file = "urllib3-2.4.0-py3-none-any.whl", hash = "sha256:4e16665048960a0900c702d4a66415956a584919c03361cac9f1df5c5dd7e813"}, - {file = "urllib3-2.4.0.tar.gz", hash = "sha256:414bc6535b787febd7567804cc015fee39daab8ad86268f1310a9250697de466"}, + {file = "urllib3-2.5.0-py3-none-any.whl", hash = "sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc"}, + {file = "urllib3-2.5.0.tar.gz", hash = "sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760"}, ] [package.extras] @@ -4125,4 +4125,4 @@ cffi = ["cffi (>=1.11)"] [metadata] lock-version = "2.1" python-versions = "^3.13.2" -content-hash = "ab3d05d57794f6b989981791e00c0bb03bbb18d161f5f9a517b46dee64c5ea2a" +content-hash = "d98565f1af2809cf4ee04b26bd9fa49cf0ffa1280029caa925024c6c6ec06923" diff --git a/pyproject.toml b/pyproject.toml index 06e49a985..b025774f6 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -68,7 +68,7 @@ python-dateutil = "^2.9.0.post0" pyyaml = "^6.0.1" requests = "^2.32.4" six = "^1.16.0" -urllib3 = "^2.2.2" +urllib3 = "^2.5.0" webencodings = "^0.5.1" virtualenv = "<20.30"