From 8737e3be16ba0fdac4d84ab7f65f3adfae38fdba Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Mar 2026 15:58:12 +0000 Subject: [PATCH] chore(deps): Bump the pip group across 1 directory with 2 updates Bumps the pip group with 2 updates in the /Docker directory: [requests](https://github.com/psf/requests) and [urllib3](https://github.com/urllib3/urllib3). Updates `requests` from 2.32.5 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.32.5...v2.33.0) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.3) --- updated-dependencies: - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- Docker/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Docker/requirements.txt b/Docker/requirements.txt index 4421c28..07fc5f8 100644 --- a/Docker/requirements.txt +++ b/Docker/requirements.txt @@ -22,7 +22,7 @@ ollama==0.6.1 # CVE-2024-45590, CVE-2024-42473: Fixed in requests >= 2.32.2 # CVE-2024-6472: Fixed in requests >= 2.32.4 # Using latest stable version 2.32.5 -requests==2.32.5 +requests==2.33.0 discord.py==2.6.4 matrix-nio==0.25.2 beautifulsoup4==4.14.2 @@ -31,7 +31,7 @@ zipp==3.23.0 # CVE-2024-37891, CVE-2024-37080: Fixed in urllib3 >= 2.2.2 # CVE-2025-78866: Open redirect fixed in urllib3 >= 2.5.0 # Using latest stable v2.x (v1.26.19 is legacy Python 2.7 support) -urllib3==2.5.0 +urllib3==2.6.3 # pip symbolic link extraction vulnerability fix # Ensures pip >= 24.2 for CVE fixes pip==26.0