Skip to content

Bump urllib3 to 2.8.0 in uv.lock (Dependabot security alerts) - #571

Merged
derek73 merged 1 commit into
masterfrom
claude/youthful-cori-s5csxs
Oct 1, 2026
Merged

derek73 merged 1 commit into
masterfrom
claude/youthful-cori-s5csxs

Conversation

@derek73

@derek73 derek73 commented Oct 1, 2026

Copy link
Copy Markdown
Owner

Summary

Resolves the three Dependabot security alerts on urllib3, whose remediation is to upgrade to 2.8.0 or later.

urllib3 is a transitive dev dependency (via requests, pulled in by Sphinx), so only its uv.lock entry changes: version, sdist and wheel hashes. pyproject.toml and nameparser's runtime dependencies (none) are untouched.

Notes

  • uv lock --upgrade-package urllib3 with uv 0.8.17 also rewrote ~70 unrelated lines of marker formatting (numpy, sphinx deps). I kept only the urllib3 block, so the diff is 3 lines. uv lock --check passes.
  • Full suite passes with urllib3 2.8.0 installed: 10612 passed, 324 skipped, 3 xfailed. One scaling-benchmark test (test_parse_cost_grows_no_worse_than_linearly[credential_run]) failed once on a first run and passed on three reruns and the full run; treating it as a timing flake.

🤖 Generated with Claude Code

https://claude.ai/code/session_01HeAZS8i1HpL9L1mLDJ3Zxr


Generated by Claude Code

urllib3 is a transitive dev dependency (via requests, for Sphinx); only its
lock entry changes.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HeAZS8i1HpL9L1mLDJ3Zxr
@codecov

codecov Bot commented Oct 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.87%. Comparing base (b39c370) to head (d839c9e).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #571   +/-   ##
=======================================
  Coverage   98.87%   98.87%           
=======================================
  Files          45       45           
  Lines        3990     3990           
=======================================
  Hits         3945     3945           
  Misses         45       45           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@derek73 derek73 self-assigned this Oct 1, 2026
@derek73 derek73 added the dependencies Pull requests that update a dependency file label Oct 1, 2026
@derek73
derek73 merged commit b922d30 into master Oct 1, 2026
11 checks passed
@derek73
derek73 deleted the claude/youthful-cori-s5csxs branch October 1, 2026 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants