From 9983ca66eb144e1f59591f9a868fba8da99a228e Mon Sep 17 00:00:00 2001 From: Rodolfo Alonso Hernandez Date: Mon, 25 Nov 2024 12:03:40 +0000 Subject: [PATCH] Bump httplib2 to 0.22.0 The previous version had the following vulnerabilities: * https://osv.dev/vulnerability/PYSEC-2021-16 * https://osv.dev/vulnerability/GHSA-q48q-77qv-cf9p * https://osv.dev/vulnerability/GHSA-93xj-8mrv-444m * https://osv.dev/vulnerability/PYSEC-2020-46 * https://osv.dev/vulnerability/GHSA-gg84-qgv9-w4pq Change-Id: Ibd0379048ee083253a9b3840872d13fba5cc8322 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 6ac9be3b27a..42e8d1c72e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,7 +10,7 @@ debtcollector>=1.19.0 # Apache-2.0 decorator>=4.1.0 # BSD eventlet>=0.36.1 # MIT pecan>=1.4.0 # BSD -httplib2>=0.9.1 # MIT +httplib2>=0.22.0 # MIT requests>=2.18.0 # Apache-2.0 Jinja2>=2.10 # BSD License (3 clause) keystonemiddleware>=5.1.0 # Apache-2.0