Fixed safety issues from 6/23

Details: * Addressed safety issues from 6/23, by increasing 'requests' to 2.31.0 on Python >=3.7. Ignored the safety issue on Python <=3.6. Signed-off-by: Andreas Maier <maiera@de.ibm.com>
zhmcclient · Jun 23, 2023 · 1588456 · 1588456
1 parent 440a758
commit 1588456
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/.safety-policy.yml b/.safety-policy.yml
@@ -83,6 +83,8 @@ security:
             reason: Not yet fixed in any ansible version, but need to support ansible 2.9
         54230:
             reason: Not yet fixed in any ansible version, but need to support ansible 2.9
+        58755:
+            reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/docs/source/release_notes.rst b/docs/source/release_notes.rst
@@ -33,6 +33,9 @@ Availability: `AutomationHub`_, `Galaxy`_, `GitHub`_
 
 **Bug fixes:**
 
+* Addressed safety issues from 6/23, by increasing 'requests' to 2.31.0
+  on Python >=3.7.
+
 **Enhancements:**
 
 **Cleanup:**

diff --git a/minimum-constraints.txt b/minimum-constraints.txt
@@ -119,8 +119,8 @@ resolvelib==0.5.3; python_version == '3.10'
 resolvelib==0.5.3; python_version >= '3.11'
 distlib==0.3.6
 
-requests==2.22.0; python_version <= '3.9'
-requests==2.25.0; python_version >= '3.10'
+requests==2.22.0; python_version <= '3.6'
+requests==2.31.0; python_version >= '3.7'
 
 zhmcclient==1.5.0