-
Notifications
You must be signed in to change notification settings - Fork 258
[ROB-2046] bumping requests version #469
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Caution Review failedThe pull request is closed. WalkthroughChanged requests dependency versions: Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes 📜 Recent review detailsConfiguration used: CodeRabbit UI Review profile: CHILL Plan: Pro 💡 Knowledge Base configuration:
You can enable these sources in your CodeRabbit configuration. ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR/Issue comments)Type Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 1
🧹 Nitpick comments (1)
requirements.txt (1)
41-41: Optional: add hashes for supply-chain hardening.Consider pinning hashes in requirements (pip --require-hashes or pip-compile --generate-hashes) to lock artifacts.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
💡 Knowledge Base configuration:
- MCP integration is disabled by default for public repositories
- Jira integration is disabled by default for public repositories
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
⛔ Files ignored due to path filters (1)
poetry.lockis excluded by!**/*.lock
📒 Files selected for processing (2)
pyproject.toml(1 hunks)requirements.txt(1 hunks)
🔇 Additional comments (2)
requirements.txt (1)
41-41: Good bump to the latest Requests (2.32.5).2.32.5 is the current release as of Aug 18, 2025 and includes the 2.32.4 security fix (CVE-2024-47081) plus reverts the SSLContext caching change from 2.32.0. Looks correct under your Python constraints. (pypi.org, github.com)
pyproject.toml (1)
26-44: Manually verify Poetry lock and requirements export
Cannot runpoetrycommands in this environment; ensure you updatepoetry.lockand re-exportrequirements.txtto keep it consistent withpyproject.toml.
No description provided.