Skip to content

pyproject: raise protobuf version to 5.29.6#1896

Open
Emantor wants to merge 1 commit into
labgrid-project:masterfrom
Emantor:topic/bump-protobuf
Open

pyproject: raise protobuf version to 5.29.6#1896
Emantor wants to merge 1 commit into
labgrid-project:masterfrom
Emantor:topic/bump-protobuf

Conversation

@Emantor

@Emantor Emantor commented Jun 11, 2026

Copy link
Copy Markdown
Member

Description
Raise protobuf version to fix two security vulnerabilities with severity "High":

  • protobuf-python has a potential Denial of Service issue 1
  • protobuf affected by a JSON recursion depth bypass 2

Checklist

  • PR has been tested

Raise protobuf version to fix two security vulnerabilities with severity
"High":
- protobuf-python has a potential Denial of Service issue [1]
- protobuf affected by a JSON recursion depth bypass [2]

[1]: https://github.com/labgrid-project/labgrid/security/dependabot/1
[2]: https://github.com/labgrid-project/labgrid/security/dependabot/3

Signed-off-by: Rouven Czerwinski <rouven.czerwinski@linaro.org>
@codecov

codecov Bot commented Jun 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 45.9%. Comparing base (be8f3a2) to head (fc6902e).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@          Coverage Diff           @@
##           master   #1896   +/-   ##
======================================
  Coverage    45.9%   45.9%           
======================================
  Files         180     180           
  Lines       14496   14496           
======================================
  Hits         6666    6666           
  Misses       7830    7830           
Flag Coverage Δ
3.10 45.9% <ø> (?)
3.11 45.9% <ø> (?)
3.12 45.9% <ø> (ø)
3.13 45.9% <ø> (?)
3.14 45.9% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant