Skip to content

Conversation

@henrymercer
Copy link
Contributor

Update requests to 2.31.0 to address GHSA-j8r2-6x86-q33q. We don't use this in the Action itself, but instead in PR checks that test Python dependency installation.

@github/codeql-python I'd appreciate it if one of you could take a careful look at this PR to make sure I've preserved test coverage. Thanks!

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows.
  • Confirm the readme has been updated if necessary.
  • Confirm the changelog has been updated if necessary.

@henrymercer henrymercer requested review from a team as code owners May 23, 2023 16:06
@henrymercer henrymercer force-pushed the henrymercer/update-requests branch from 66e535c to 6e92b19 Compare May 23, 2023 16:07
@henrymercer
Copy link
Contributor Author

Debug artifact upload failures fixed by #1696.

Copy link
Contributor

@yoff yoff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

(nit: It would have been nice to split the first commit in two so the rewriting of the files was clear from the diff and the moving happened separately.)

@henrymercer
Copy link
Contributor Author

Thanks, that's good feedback. I had hoped that the diff would recognize the change as a rename!

@henrymercer henrymercer merged commit f8b1cb6 into main May 26, 2023
@henrymercer henrymercer deleted the henrymercer/update-requests branch May 26, 2023 10:10
@github-actions github-actions bot mentioned this pull request Jun 1, 2023
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants