Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): migrate from retry to retry2 to address CVE-2022-42969 #2665

Merged

Conversation

heitorlessa
Copy link
Contributor

Issue number: #2203

Summary

retry dep stopped maintenance 6 years ago causing a CVE in py which is only used in dev and python2. This PR migrates to retry2 which is maintained and no longer depends on py, thus addressing the CVE.

Changes

Please provide a summary of what's being changed

User experience

Please share what the user experience looks like before and after this change

Checklist

If your change doesn't seem to apply, please leave them unchecked.

Is this a breaking change?

RFC issue number:

Checklist:

  • Migration process documented
  • Implement warnings (if it can live side by side)

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

@heitorlessa heitorlessa requested a review from a team as a code owner July 4, 2023 16:25
@boring-cyborg boring-cyborg bot added the dependencies Pull requests that update a dependency file label Jul 4, 2023
@pull-request-size pull-request-size bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Jul 4, 2023
@github-actions github-actions bot added the internal Maintenance changes label Jul 4, 2023
@leandrodamascena leandrodamascena merged commit 088b7cf into aws-powertools:develop Jul 4, 2023
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file internal Maintenance changes size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants