From 7d16d4c194dd946b6d387b231050a3326ca2019a Mon Sep 17 00:00:00 2001
From: Saksham Nautiyal <Saksham.nautiyal@dell.com>
Date: Wed, 16 Sep 2026 06:19:05 -0400
Subject: [PATCH 1/2] Update idna to version 3.19 to resolve BlackDuck
 vulnerability

- Added idna==3.19 to requirements.txt
- Added idna>=3.19 to setup.py dependencies
- Updated from idna 3.18 to 3.19 which has no known vulnerabilities

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 requirements.txt | 1 +
 setup.py         | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 8e5c7a0..b30295b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ requests==2.33.0
 urllib3==2.7.0
 packaging==26.0
 setuptools==80.10.2
+idna==3.19
diff --git a/setup.py b/setup.py
index 1efcf06..54c9101 100644
--- a/setup.py
+++ b/setup.py
@@ -15,7 +15,8 @@
         "urllib3>=1.26.7", 
         "requests>=2.23.0", 
         "packaging>=26.0", 
-        "setuptools>=80.10.2"
+        "setuptools>=80.10.2",
+        "idna>=3.19"
     ],
     license_files=("LICENSE",),
     classifiers=["License :: OSI Approved :: Apache Software License"],

From 39c3fc8b110e9c7b218b58ce2333d354c2f0b1e9 Mon Sep 17 00:00:00 2001
From: Saksham Nautiyal <Saksham.nautiyal@dell.com>
Date: Wed, 16 Sep 2026 06:33:16 -0400
Subject: [PATCH 2/2] Remove standalone requests install from pytest workflow

- Removed 'pip install requests' from pytest workflow to prevent version conflicts
- requirements.txt already specifies requests==2.33.0 with correct dependencies
- This ensures consistent dependency resolution during CI/CD scanning

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 .github/workflows/pytest.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 4ff881b..e995574 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -19,7 +19,6 @@ jobs:
         run: |  
           python -m pip install --upgrade pip
           pip install testtools
-          pip install requests
           pip install pytest
           pip install pytest-coverage
           if [ -f requirements.txt ]; then pip install -r requirements.txt; fi