From 52a7a317574581964b639e40b2e4e2f18e7dccd3 Mon Sep 17 00:00:00 2001 From: Francis Charette Migneault Date: Fri, 9 Jan 2026 18:33:51 -0500 Subject: [PATCH 1/2] pin urllib3>=2.6.3 --- .dockerignore | 1 + .gitignore | 1 + CHANGES.rst | 4 ++++ requirements.txt | 2 +- 4 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.dockerignore b/.dockerignore index 81d160c..2898a6c 100644 --- a/.dockerignore +++ b/.dockerignore @@ -43,6 +43,7 @@ testdata.json # PyCharm **/*.idea +.run # Intellij **/*.iml diff --git a/.gitignore b/.gitignore index 60ba342..2c4a18a 100644 --- a/.gitignore +++ b/.gitignore @@ -35,6 +35,7 @@ coverage.* # PyCharm *.idea +.run # Kate *.kate-swp diff --git a/CHANGES.rst b/CHANGES.rst index 1bb292f..294fac0 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -4,6 +4,10 @@ Changes Unreleased ==================================================================================================================== +Changes: + +* Pin `urllib3>=2.6.3` for latest security vulnerability fixes. + 0.11.0 (2025-12-15) ==================================================================================================================== diff --git a/requirements.txt b/requirements.txt index 72983a9..d540c88 100644 --- a/requirements.txt +++ b/requirements.txt @@ -37,5 +37,5 @@ PyJWT>=2 setuptools==75.3.2; python_version < "3.9" # noqa setuptools>=78.1.1; python_version >= "3.9" urllib3>=2.2.2; python_version < "3.9" # noqa -urllib3>=2.6.0; python_version >= "3.9" +urllib3>=2.6.3; python_version >= "3.9" zipp>=3.19.1 From 0c1c0c192d5b9c701e2bdfab21fc56a49f7d3115 Mon Sep 17 00:00:00 2001 From: Francis Charette Migneault Date: Fri, 9 Jan 2026 18:35:29 -0500 Subject: [PATCH 2/2] fix rst code in changelog --- CHANGES.rst | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/CHANGES.rst b/CHANGES.rst index 294fac0..ed6b0ec 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -6,7 +6,7 @@ Unreleased Changes: -* Pin `urllib3>=2.6.3` for latest security vulnerability fixes. +* Pin ``urllib3>=2.6.3`` for latest security vulnerability fixes. 0.11.0 (2025-12-15) ==================================================================================================================== @@ -14,9 +14,9 @@ Changes: Changes: * Add Python 3.13 to CI and project setup. -* Update docker base to `python:3.13.11-alpine3.23`. -* Pin `requests>=2.32.5` and `urllib3>=2.6.0` for latest security vulnerability fixes. -* Pin `requests>=2.32.4` to address security vulnerability +* Update docker base to ``python:3.13.11-alpine3.23``. +* Pin ``requests>=2.32.5`` and ``urllib3>=2.6.0`` for latest security vulnerability fixes. +* Pin ``requests>=2.32.4`` to address security vulnerability (see `#143 `_). 0.10.1 (2025-05-23)