jeans/core
jeans/core
1
0
Fork 0
mirror of https://github.com/home-assistant/core.git synced 2025-07-17 10:17:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Move urllib3 constraint to pyproject.toml (#106768)

Browse Source
This commit is contained in:
Sid 2024-01-02 13:34:19 +01:00 committed by Franck Nijhof
parent 35fc26457b
commit 3419b8d082
No known key found for this signature in database
GPG Key ID: D62583BA8AB11CA3
4 changed files with 6 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
homeassistant/package_constraints.txt
View File

@ -55,6 +55,7 @@ scapy==2.5.0
SQLAlchemy==2.0.23 SQLAlchemy==2.0.23
typing-extensions>=4.9.0,<5.0 typing-extensions>=4.9.0,<5.0
ulid-transform==0.9.0 ulid-transform==0.9.0
urllib3>=1.26.5,<2
voluptuous-serialize==2.6.0 voluptuous-serialize==2.6.0
voluptuous==0.13.1 voluptuous==0.13.1
webrtc-noise-gain==1.2.3 webrtc-noise-gain==1.2.3
@ -65,11 +66,6 @@ zeroconf==0.131.0
# see https://github.com/home-assistant/core/pull/16238 # see https://github.com/home-assistant/core/pull/16238
pycryptodome>=3.6.6 pycryptodome>=3.6.6
# Constrain urllib3 to ensure we deal with CVE-2020-26137 and CVE-2021-33503
# Temporary setting an upper bound, to prevent compat issues with urllib3>=2
# https://github.com/home-assistant/core/issues/97248
urllib3>=1.26.5,<2
# Constrain httplib2 to protect against GHSA-93xj-8mrv-444m # Constrain httplib2 to protect against GHSA-93xj-8mrv-444m
# https://github.com/advisories/GHSA-93xj-8mrv-444m # https://github.com/advisories/GHSA-93xj-8mrv-444m
httplib2>=0.19.0 httplib2>=0.19.0

4
pyproject.toml
View File

@ -54,6 +54,10 @@ dependencies = [
"requests==2.31.0", "requests==2.31.0",
"typing-extensions>=4.9.0,<5.0", "typing-extensions>=4.9.0,<5.0",
"ulid-transform==0.9.0", "ulid-transform==0.9.0",
# Constrain urllib3 to ensure we deal with CVE-2020-26137 and CVE-2021-33503
# Temporary setting an upper bound, to prevent compat issues with urllib3>=2
# https://github.com/home-assistant/core/issues/97248
"urllib3>=1.26.5,<2",
"voluptuous==0.13.1", "voluptuous==0.13.1",
"voluptuous-serialize==2.6.0", "voluptuous-serialize==2.6.0",
"yarl==1.9.4", "yarl==1.9.4",

1
requirements.txt
View File

@ -30,6 +30,7 @@ PyYAML==6.0.1
requests==2.31.0 requests==2.31.0
typing-extensions>=4.9.0,<5.0 typing-extensions>=4.9.0,<5.0
ulid-transform==0.9.0 ulid-transform==0.9.0
urllib3>=1.26.5,<2
voluptuous==0.13.1 voluptuous==0.13.1
voluptuous-serialize==2.6.0 voluptuous-serialize==2.6.0
yarl==1.9.4 yarl==1.9.4

5
script/gen_requirements_all.py
View File

@ -59,11 +59,6 @@ CONSTRAINT_BASE = """
# see https://github.com/home-assistant/core/pull/16238 # see https://github.com/home-assistant/core/pull/16238
pycryptodome>=3.6.6 pycryptodome>=3.6.6
# Constrain urllib3 to ensure we deal with CVE-2020-26137 and CVE-2021-33503
# Temporary setting an upper bound, to prevent compat issues with urllib3>=2
# https://github.com/home-assistant/core/issues/97248
urllib3>=1.26.5,<2
# Constrain httplib2 to protect against GHSA-93xj-8mrv-444m # Constrain httplib2 to protect against GHSA-93xj-8mrv-444m
# https://github.com/advisories/GHSA-93xj-8mrv-444m # https://github.com/advisories/GHSA-93xj-8mrv-444m
httplib2>=0.19.0 httplib2>=0.19.0