Skip to content

[Backport 7.55.x] Upgrade requests to 2.32.3 and adds a license validation override to ddev#17776

Merged
steveny91 merged 1 commit into7.55.xfrom
backport-17702-to-7.55.x
Jun 10, 2024
Merged

[Backport 7.55.x] Upgrade requests to 2.32.3 and adds a license validation override to ddev#17776
steveny91 merged 1 commit into7.55.xfrom
backport-17702-to-7.55.x

Conversation

@datadog-agent-integrations-bot
Copy link
Contributor

Backport e1e61e5 from #17702.


What does this PR do?

This PR upgrades requests to the latest version to fix a CVE.

Motivation

This changelog.

Additional Notes

  • Fixes DataDog/image-vuln-scans#1488

Review checklist (to be filled by reviewers)

  • Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
  • Changelog entries must be created for modifications to shipped code
  • Add the qa/skip-qa label if the PR doesn't need to be tested during QA.
  • If you need to backport this PR to another branch, you can add the backport/<branch-name> label to the PR and it will automatically open a backport PR once this one is merged

… to ddev (#17702)

* Upgrade `requests` to `2.32.3`

* Add changelog entry

* Bump the `requests-unixsocket` version to requests-unixsocket2==0.4.0

in order to get the following fix: msabramo/requests-unixsocket#72

* update license

* changelog

* Apply suggestions from code review

Co-authored-by: Steven Yuen <steven.yuen@datadoghq.com>

* Regenerate LICENSE-3rdparty.csv

* conflicts

* sync license

* changelog

---------

Co-authored-by: steveny91 <steven.yuen@datadoghq.com>
(cherry picked from commit e1e61e5)
@steveny91 steveny91 merged commit 8102453 into 7.55.x Jun 10, 2024
@steveny91 steveny91 deleted the backport-17702-to-7.55.x branch June 10, 2024 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants