Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Dependencies] Upgrade Werkzeug from version 2.0.x to version 3.1.3, Connexion from version 2.13.x to version 3.1.x and removed support for Python 3.7 and 3.8 #6370

Draft
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

gmarciani
Copy link
Contributor

@gmarciani gmarciani commented Jul 26, 2024

Description of changes

  1. Upgrade Werkzeug from version 2.0.x to version 3.1.3 to address CVE-2024-34069, CVE-2024-49766, CVE-2024-49767.
  2. Upgrade Connexion is upgraded to version 3.1.x, as required by the upgraded version of Werkzeug.
    1. Remove support for Python 3.7. and Python 3.8 which are in EOL and are not even supproted by Werkzeug 3+

Tests

  • PR checks

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@gmarciani gmarciani added skip-changelog-update Disables the check that enforces changelog updates in PRs dependencies Pull requests that update a dependency file 3.x labels Jul 26, 2024
@gmarciani gmarciani force-pushed the wip/mgiacomo/3110/upgrade-werkzeug-fix-vuln-0726-1 branch from f528d26 to ae6c7c4 Compare November 27, 2024 10:44
@gmarciani gmarciani changed the title [Dependencies] Upgrade Werkzeug from version 2.0.* to version 3.0.3 [Dependencies] Upgrade Werkzeug from version 2.0.x to version 3.1.3, Connexion from version 2.13.x to version 3.1.x and removed support for Python 3.7 and 3.8 Nov 27, 2024
@gmarciani gmarciani force-pushed the wip/mgiacomo/3110/upgrade-werkzeug-fix-vuln-0726-1 branch 2 times, most recently from aa613f3 to 1d283d7 Compare November 27, 2024 12:28
@gmarciani gmarciani force-pushed the wip/mgiacomo/3110/upgrade-werkzeug-fix-vuln-0726-1 branch from 65e7d37 to 0f671c3 Compare November 29, 2024 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3.x dependencies Pull requests that update a dependency file skip-changelog-update Disables the check that enforces changelog updates in PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant