From 3ecab3987c8b0af23d7dd71ec8f47f57dac36da7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Oct 2023 18:39:40 +0000 Subject: [PATCH 1/3] Bump urllib3 from 2.0.6 to 2.0.7 in /doc Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.6 to 2.0.7. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/2.0.6...2.0.7) --- updated-dependencies: - dependency-name: urllib3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- doc/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/requirements.txt b/doc/requirements.txt index 290dcd024d4..55019a68dc9 100644 --- a/doc/requirements.txt +++ b/doc/requirements.txt @@ -69,7 +69,7 @@ sphinxcontrib-serializinghtml==1.1.5 # via sphinx sphinxnotes-strike==1.2 # via -r requirements.in -urllib3==2.0.6 +urllib3==2.0.7 # via # -r requirements.in # requests From 34377ea7d24377429f7a2e877794c14233e7ff83 Mon Sep 17 00:00:00 2001 From: brandon s allbery kf8nh Date: Tue, 24 Oct 2023 14:46:29 -0400 Subject: [PATCH 2/3] also update .in file --- doc/requirements.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/requirements.in b/doc/requirements.in index 0a8bc49fecc..38e365cce5d 100644 --- a/doc/requirements.in +++ b/doc/requirements.in @@ -7,4 +7,4 @@ Pygments >= 2.7.4 # CVE-2023-37920 certifi >= 2023.07.22 # CVE-2023-43804 -urllib3 >= 2.0.6 +urllib3 >= 2.0.7 From bad0925c1053286f3edc0cfeddc0a0c457d730f2 Mon Sep 17 00:00:00 2001 From: brandon s allbery kf8nh Date: Tue, 24 Oct 2023 15:00:11 -0400 Subject: [PATCH 3/3] update CVE number, this is a new CVE Not a mistake in fixing the old --- doc/requirements.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/requirements.in b/doc/requirements.in index 38e365cce5d..d8de16ca602 100644 --- a/doc/requirements.in +++ b/doc/requirements.in @@ -6,5 +6,5 @@ sphinxnotes-strike Pygments >= 2.7.4 # CVE-2023-37920 certifi >= 2023.07.22 -# CVE-2023-43804 +# CVE-2023-45803 urllib3 >= 2.0.7