Skip to content

⚠️ SECURITY-#6: Update httpcore to 1.0.9 for h11 compatibility#8

Merged
FernandoCelmer merged 1 commit intomasterfrom
feature/6
Apr 11, 2026
Merged

⚠️ SECURITY-#6: Update httpcore to 1.0.9 for h11 compatibility#8
FernandoCelmer merged 1 commit intomasterfrom
feature/6

Conversation

@FernandoCelmer
Copy link
Copy Markdown
Member

Description

Update httpcore from 1.0.7 to 1.0.9 in server_flow/requirements.txt to resolve dependency conflict with h11==0.16.0.

httpcore 1.0.7 required h11<0.15, which conflicted with the security update to h11==0.16.0 (CVE fix for malformed Chunked-Encoding bodies).

Files Changed

  • server_flow/requirements.txthttpcore==1.0.7httpcore==1.0.9

Motivation and Context

Fixes CI failure from PR #7 where pip install failed due to conflicting h11 version requirements.

Closes #6

Types of changes

  • Bug fix (change that fixes an issue)

Checklist

  • I have performed a self-review of my own code
  • Dependency versions are compatible

@FernandoCelmer FernandoCelmer merged commit 1b00179 into master Apr 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix Dependabot security alerts — update vulnerable dependencies

1 participant