Skip to content

[Security] update requirements files to address security alerts - #174

Open
Alex-Preciado wants to merge 3 commits into
masterfrom
security/update-requirements
Open

[Security] update requirements files to address security alerts#174
Alex-Preciado wants to merge 3 commits into
masterfrom
security/update-requirements

Conversation

@Alex-Preciado

@Alex-Preciado Alex-Preciado commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

Description:
This PR addresses several security vulnerabilities flagged by Dependabot in this repository. These updates ensure our dependencies are patched to versions that mitigate known risks.

Additionally, the list of contributors in CHANGELOG.md has been updated to follow alphabetical order.

Changes:
Updated the following dependencies in requirements.txt and requirements-ci.txt:

  • urllib3
  • requests
  • wheel

@codecov

codecov Bot commented Apr 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.69%. Comparing base (e84a88c) to head (c1874a6).
⚠️ Report is 7 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #174   +/-   ##
=======================================
  Coverage   98.69%   98.69%           
=======================================
  Files           6        6           
  Lines         537      537           
=======================================
  Hits          530      530           
  Misses          7        7           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@JerryChen97

Copy link
Copy Markdown
Contributor

@Alex-Preciado Since we've already shifted towards pyproject.toml in a recent commit, shall we split this PR into two and close the current one:

  1. fix the naming order of contributors
  2. bump all the versions of dependencies flagged by dependa bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants