diff --git a/.safety-policy.yml b/.safety-policy.yml index 8b6a55c4b..92313d3d0 100644 --- a/.safety-policy.yml +++ b/.safety-policy.yml @@ -83,6 +83,8 @@ security: reason: Not yet fixed in any ansible version, but need to support ansible 2.9 54230: reason: Not yet fixed in any ansible version, but need to support ansible 2.9 + 58755: + reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there # Continue with exit code 0 when vulnerabilities are found. continue-on-vulnerability-error: False diff --git a/docs/source/release_notes.rst b/docs/source/release_notes.rst index 28762725d..f370108e9 100644 --- a/docs/source/release_notes.rst +++ b/docs/source/release_notes.rst @@ -33,6 +33,9 @@ Availability: `AutomationHub`_, `Galaxy`_, `GitHub`_ **Bug fixes:** +* Addressed safety issues from 6/23, by increasing 'requests' to 2.31.0 + on Python >=3.7. + **Enhancements:** **Cleanup:** diff --git a/minimum-constraints.txt b/minimum-constraints.txt index db0223b51..fcaef9292 100644 --- a/minimum-constraints.txt +++ b/minimum-constraints.txt @@ -119,8 +119,8 @@ resolvelib==0.5.3; python_version == '3.10' resolvelib==0.5.3; python_version >= '3.11' distlib==0.3.6 -requests==2.22.0; python_version <= '3.9' -requests==2.25.0; python_version >= '3.10' +requests==2.22.0; python_version <= '3.6' +requests==2.31.0; python_version >= '3.7' zhmcclient==1.5.0