Skip to content

Commit b7ed99d

Browse files
authored
Update urllib3 python wheel for security (#1038)
1 parent 0218918 commit b7ed99d

File tree

5 files changed

+9
-6
lines changed

5 files changed

+9
-6
lines changed

CHANGELOG.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
2525
to load using multicompile instead of trying to do own multi-threading of item load which causes
2626
lock contention by bypassing IRIS compiler.
2727
- #481: Improve BuildDependencyGraph performance by doing the following:
28-
- Eliminate recursion and use iteration.
29-
- Remove depth first search and do pure breadth first search.
30-
- Have better caching of results for module searches by collapsing search expressions (reducing expressions that are intersections).
28+
- Eliminate recursion and use iteration.
29+
- Remove depth first search and do pure breadth first search.
30+
- Have better caching of results for module searches by collapsing search expressions (reducing expressions that are intersections).
3131

3232
### Removed
3333
- #938: Removed secret flag NewVersion handling in %Publish()
@@ -50,6 +50,9 @@ lock contention by bypassing IRIS compiler.
5050
- #828: The `CheckStatus` flag for `<Invoke>` action has been deprecated. Default behavior is now to always check the status of the method if and only if the method signature returns %Library.Status
5151
- #885: `-synchronous` flag since loading dependencies synchronously is now the default behavior.
5252

53+
### Security
54+
- urllib3 wheel has been updated to 2.6.3
55+
5356
## [0.10.4] - 2025-10-21
5457

5558
### Added

module.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
<PythonWheel Name="referencing-0.36.2-py3-none-any.whl" ExtraPipFlags="--no-deps" />
4646
<PythonWheel Name="requests-2.32.4-py3-none-any.whl" ExtraPipFlags="--no-deps" />
4747
<PythonWheel Name="typing_extensions-4.12.2-py3-none-any.whl" ExtraPipFlags="--no-deps" />
48-
<PythonWheel Name="urllib3-2.6.0-py3-none-any.whl" ExtraPipFlags="--no-deps" />
48+
<PythonWheel Name="urllib3-2.6.3-py3-none-any.whl" ExtraPipFlags="--no-deps" />
4949

5050
<!-- Pure python implementation of rpds-py for offline installation or behind a
5151
firewall.

preload/cls/IPM/Installer.cls

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -438,7 +438,7 @@ ClassMethod CleanupOldMappings() As %Status
438438
}
439439
set $namespace = namespace
440440
// check if IPM is installed in this namespace
441-
if '$$$comClassDefined("%IPM.Utils.Module") {
441+
if '$$$comClassDefined("%IPM.Main") {
442442
continue
443443
}
444444

wheels/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,6 @@ oras==0.1.30
1111
referencing==0.36.2
1212
requests==2.32.4
1313
typing_extensions==4.12.2
14-
urllib3==2.6.0
14+
urllib3==2.6.3
1515
# When https://github.com/pypa/pip/pull/10837 is merged, we should specify per-requirement `--no-deps` in requirements.txt directly,
1616
# so that dependabot etc. don't pick up vulnerabilities in `rpds-py`, which we implement ourselves.

0 commit comments

Comments
 (0)