Skip to content

Comments

pin urllib3>=2.6.3#148

Merged
fmigneault merged 2 commits intomasterfrom
security-fix-urllib
Jan 9, 2026
Merged

pin urllib3>=2.6.3#148
fmigneault merged 2 commits intomasterfrom
security-fix-urllib

Conversation

@fmigneault
Copy link
Member

No description provided.

@codecov-commenter
Copy link

codecov-commenter commented Jan 9, 2026

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.73%. Comparing base (a3fd92f) to head (0c1c0c1).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #148   +/-   ##
=======================================
  Coverage   76.73%   76.73%           
=======================================
  Files          41       41           
  Lines        1831     1831           
=======================================
  Hits         1405     1405           
  Misses        426      426           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@fmigneault fmigneault merged commit e409cff into master Jan 9, 2026
25 checks passed
@fmigneault fmigneault deleted the security-fix-urllib branch January 9, 2026 23:37
fmigneault added a commit to bird-house/birdhouse-deploy that referenced this pull request Feb 17, 2026
…OL Python and http-related libraires (#622)

## Overview

Update multiple components with corresponding updates of `urllib`,
`requests`, etc.
At the same time, bump to Python 3.13 versions as applicable.

## Changes

**Non-breaking changes**
- STAC API: Security update, minor OpenAPI version reporting fixes, and
`stac-fastapi`/`starlette` compatibility fix using
[2.3.0](https://github.com/crim-ca/stac-app/releases/tag/2.3.0)
   - relates to crim-ca/stac-app#65
   - relates to crim-ca/stac-app#69
   - relates to crim-ca/stac-app#74

- Cowbird: Security update to version
[2.6.0](https://github.com/Ouranosinc/cowbird/releases/tag/2.6.0)
  - relates to Ouranosinc/cowbird#98

- Magpie: Security update to version
[4.3.0](https://github.com/Ouranosinc/Magpie/releases/tag/4.3.0)
  - relates to Ouranosinc/Magpie#640
  - relates to Ouranosinc/Magpie#642

- Twitcher: Security update to version
[0.11.0](https://github.com/bird-house/twitcher/releases/tag/v0.11.0)
  - relates to bird-house/twitcher#143
  - relates to bird-house/twitcher#145
  - relates to bird-house/twitcher#146
  - relates to bird-house/twitcher#148

- Weaver: Security and dependency fix update using version
[6.8.3](https://github.com/crim-ca/weaver/releases/tag/6.8.3)
  - relates to crim-ca/weaver#868
  - relates to crim-ca/weaver#869
  - relates to crim-ca/weaver#877
  - relates to crim-ca/weaver#881

- Weaver: Update `post-docker-compose-up` script.
  - Handle multiple Magpie cookies in response.
This can happen depending on specific internal HTTP libraries versions
of the services.
To retain backward/forward compatibility, all cookies returned from
Magpie are chained in following `curl` commands.
- Use birdhouse `log` utility to report operations produced by the
script rather than custom "echo level".

- Weaver: Job Result Proxy Buffers
- The *Job Results* responses of `weaver` can return a lot of `Link`
headers. This is done to provide job metadata
references and provenance traceability details, but also for actual
results locations that can vary in quantity
    depending on the actual process execution.
Therefore, the Ngnix `proxy_buffer_size` and `proxy_buffers` directives
of the `proxy` service must be added with
sufficiently large values to avoid HTTP 502 errors when the response
headers exceed the default buffer sizes.
The `WEAVER_PROXY_RESPONSE_BUFFER_SIZE` and
`WEAVER_PROXY_RESPONSE_BUFFER_COUNT` variables are added to allow
further customization as needed by the server. Their defaults are
reasonable values to meet minimal requirements
    by `weaver`'s metadata `Link` and a few result outputs.

- Birdhouse: Allow `log <LEVEL> -n ...` and `log <LEVEL> -p ...` to
generate log outputs without newline/prefixes.

These options allow writing multiple log entries onto the same line for
correct visual rendering of distinct `log`
calls separated to allow some intermediate logic. The `log` function
invocations with these options respect the
log levels in order to make the messages consistent with enabled
redirections and verbosity.

**Breaking changes**
- n/a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants