Skip to content

drop Python 3.8 support and vcrpy and update deps to fix CVEs#45

Merged
tngraf merged 1 commit intomasterfrom
fix-CVEs
Jun 29, 2025
Merged

drop Python 3.8 support and vcrpy and update deps to fix CVEs#45
tngraf merged 1 commit intomasterfrom
fix-CVEs

Conversation

@gernot-h
Copy link
Collaborator

Seems we need to drop Python 3.8 to get rid of CVE warnings due to an old urllib3 version.

Also, let's finally drop vcrpy, as far as I can see this is still a leftover from ancient times when I had the plan to add vcr-based test cases and it currently doesn't allow to completely get rid of vulnerable urllib dependencies: kevin1024/vcrpy#926.

@tngraf tngraf merged commit 56afb26 into master Jun 29, 2025
8 checks passed
@tngraf
Copy link
Collaborator

tngraf commented Jun 29, 2025

@gernot-h - thanks for fixing

@gernot-h gernot-h deleted the fix-CVEs branch June 30, 2025 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants