[miniconda] - requests - GHSA-9hjg-9r4m-mvj7 - urllib3 - GHSA-pq67-6m6q-mj2v (#1474)

* updated requests package version from 2.32.0 to 2.32.4

* requests package updation

* adding the package

* urllib3 package version update for vulnerability GHSA-pq67-6m6q-mj2v

Author: sireeshajonnalagadda

src/miniconda/.devcontainer/apply_security_patches.sh

@@ -5,7 +5,7 @@
 
 # define array of packages for pinning to the patched versions
 # vulnerable_packages=( "package1=version1" "package2=version2" "package3=version3" )
-vulnerable_packages=( "cryptography=44.0.1" )
+vulnerable_packages=( "cryptography=44.0.1" "requests=2.32.4" "urllib3=2.5.0" )
 
 # Define the number of rows (based on the length of vulnerable_packages)
 rows=${#vulnerable_packages[@]}

src/miniconda/manifest.json

@@ -1,5 +1,5 @@
 {
-	"version": "1.1.8",
+	"version": "1.1.9",
 	"build": {
 		"latest": true,
 		"rootDistro": "debian",

src/miniconda/test-project/test.sh

@@ -21,13 +21,13 @@ check "usr-local-etc-config-does-not-exist" test ! -f "/usr/local/etc/gitconfig"
 checkPythonPackageVersion "cryptography" "44.0.1"
 checkPythonPackageVersion "setuptools" "65.5.1"
 checkPythonPackageVersion "wheel" "0.38.1"
-checkPythonPackageVersion "urllib3" "2.2.2"
+checkPythonPackageVersion "urllib3" "2.5.0"
 
 checkCondaPackageVersion "cryptography" "44.0.1"
 checkCondaPackageVersion "setuptools" "65.5.1"
 checkCondaPackageVersion "wheel" "0.38.1"
-checkCondaPackageVersion "requests" "2.32.0"
-checkCondaPackageVersion "urllib3" "1.26.17"
+checkCondaPackageVersion "requests" "2.32.4"
+checkCondaPackageVersion "urllib3" "2.5.0"
 checkCondaPackageVersion "idna" "3.7"
 checkCondaPackageVersion "tqdm" "4.66.4"
 checkCondaPackageVersion "certifi" "2024.7.4"