Conversation
Bump constraint-dependencies to patched versions: - Jinja2 3.1.5 -> 3.1.6 (CVE-2025-27516, sandbox breakout) - lxml-html-clean 0.4.3 -> 0.4.4 (CVE-2026-28348, CVE-2026-28350) - multipart 1.2.1 -> 1.2.2 (CVE-2026-28356, ReDoS) - Pillow 11.3.0 -> 12.1.1 (CVE-2026-25990, out-of-bounds write) - PyJWT 2.10.1 -> 2.12.0 (CVE-2026-32597, unknown crit header) - requests 2.32.3 -> 2.33.0 (CVE-2024-47081, CVE-2026-25645) - urllib3 2.3.0 -> 2.6.3 (5 CVEs including decompression bombs) - protobuf 6.32.1 -> 6.33.5 (CVE-2026-0994, JSON recursion bypass) - robotframework-browser 19.10.1 -> 19.12.7 (chain fix for protobuf) - robotframework-assertion-engine 3.0.3 -> 4.0.0 (chain fix) - wrapt 1.17.3 -> 2.1.2 (chain fix) Remaining open: CVE-2026-4539 (Pygments ReDoS) - no upstream patch yet.
- Add PRODUCTS_EASYNEWSLETTER_ACCEPTANCE_TESTING layer to testing.py - Create tests/test_robot.py using robotsuite + layered() pattern - Add robotsuite to dev dependencies in pyproject.toml - Add robot CI job with headless Chrome browser support
- Fix import ordering in test_robot.py (stdlib before third-party/local) - Exclude robot tests from regular test job; robot tests require Chrome and run exclusively in the dedicated robot CI job - Fix Newsletter add test: fill required fields sender_email, sender_name, test_email that caused form validation to fail silently - Fix subscriber robot test: navigate inside Newsletter container, use email field instead of non-existent title widget, create subscriber with correct type and container - Fix issue robot test: navigate inside Newsletter container, use correct content type and URL instead of wrong ++add++Newsletter - Update uv.lock to include robotsuite in dev dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bump constraint-dependencies to patched versions:
Remaining open: CVE-2026-4539 (Pygments ReDoS) - no upstream patch yet.