Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade aiohttp to 3.9.5 for CVE-2024-30251 #617

Merged
merged 1 commit into from
May 10, 2024
Merged

Conversation

goat-ssh
Copy link
Contributor

Summary of changes

trivy scan was failing recently https://jenkins.crate.io/job/devops/job/docker-build-publish/4956//console

Checklist

  • Link to issue this PR refers to:
  • Relevant changes are reflected in CHANGES.rst
  • Added or changed code is covered by tests
  • Documentation has been updated if necessary
  • Changed code does not contain any breaking changes (or this is a major version change)

Copy link
Contributor

@juanpardo juanpardo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there is only one breaking change in the aiohttp changelog notes, and it looks safe for us

@goat-ssh goat-ssh merged commit b34a086 into master May 10, 2024
5 checks passed
@goat-ssh goat-ssh deleted the s/aiohttp_bump branch May 10, 2024 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants