Skip to content

Commit 342e2b1

Browse files
dependabot[bot]rjaegersgithub-actions[bot]
authored
chore(deps): bump urllib3 from 1.26.20 to 2.5.0 in /.devcontainer/cpp (#956)
* chore(deps): bump urllib3 from 1.26.20 to 2.5.0 in /.devcontainer/cpp Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.20 to 2.5.0. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.20...2.5.0) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> * fix: remove vulnerability excludes from trivy * Update .github/linters/.trivyignore.yml Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Signed-off-by: Ron <[email protected]> --------- Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Ron <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ron <[email protected]> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
1 parent bcf8952 commit 342e2b1

File tree

2 files changed

+6
-17
lines changed

2 files changed

+6
-17
lines changed

.devcontainer/cpp/requirements.txt

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -135,7 +135,7 @@ cmake==4.1.0 \
135135
--hash=sha256:dab375932f5962e078da8cf76ca228c21bf4bea9ddeb1308e2b35797fa30f784 \
136136
--hash=sha256:e77ac2554a7b8a94745add465413e3266b714766e9a5d22ac8e5b36a900a1136 \
137137
--hash=sha256:f2eaa6f0a25e31fe09fb0b7f40fbf208eea5f1313093ff441ecfff7dc1b80adf
138-
# via -r cpp/requirements.in
138+
# via -r requirements.in
139139
colorama==0.4.6 \
140140
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
141141
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
@@ -146,7 +146,7 @@ colorlog==6.8.2 \
146146
# via gcovr
147147
conan==2.20.1 \
148148
--hash=sha256:3d2eb33c78a8b2ea78592415dae3799074d90eb42bfcbe28bf6b6b7848e0fa03
149-
# via -r cpp/requirements.in
149+
# via -r requirements.in
150150
distro==1.8.0 \
151151
--hash=sha256:02e111d1dc6a50abb8eed6bf31c3e48ed8b0830d1ea2a1b78c61765c2513fdd8 \
152152
--hash=sha256:99522ca3e365cac527b44bde033f64c6945d90eb9f769703caaec52b09bbd3ff
@@ -158,7 +158,7 @@ fasteners==0.19 \
158158
gcovr==8.4 \
159159
--hash=sha256:1016d013d6c55225b1f716a4325e16ad5d626ff05b20b8a12d542e2d9a82ac21 \
160160
--hash=sha256:8ea0cf23176b1029f28db679d712ca6477b3807097c3755c135bdc53b51cfa72
161-
# via -r cpp/requirements.in
161+
# via -r requirements.in
162162
idna==3.10 \
163163
--hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
164164
--hash=sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3
@@ -399,9 +399,9 @@ six==1.16.0 \
399399
--hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
400400
--hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
401401
# via python-dateutil
402-
urllib3==1.26.20 \
403-
--hash=sha256:0ed14ccfbf1c30a9072c7ca157e4319b70d65f623e91e7b32fadb2853431016e \
404-
--hash=sha256:40c2dc0c681e47eb8f90e7e27bf6ff7df2e677421fd46756da1161c39ca70d32
402+
urllib3==2.5.0 \
403+
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
404+
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc
405405
# via
406406
# conan
407407
# requests

.github/linters/.trivyignore.yml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,3 @@
22
misconfigurations:
33
- id: AVD-DS-0002
44
statement: We allow root access in our container that we use for development purposes (https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0002/)
5-
vulnerabilities:
6-
- id: CVE-2025-50181
7-
paths:
8-
- ".devcontainer/cpp/requirements.txt"
9-
expired_at: 2025-10-01
10-
statement: This vulnerable dependency comes in via the Conan package, work is in-progress on supporting a non-vulnerable version (https://github.com/conan-io/conan/issues/13948)
11-
- id: CVE-2025-50182
12-
paths:
13-
- ".devcontainer/cpp/requirements.txt"
14-
expired_at: 2025-10-01
15-
statement: This vulnerable dependency comes in via the Conan package, work is in-progress on supporting a non-vulnerable version (https://github.com/conan-io/conan/issues/13948)

0 commit comments

Comments
 (0)