From d54febb15dc9def6af013ac1047503afeda28fbc Mon Sep 17 00:00:00 2001 From: Rasmi Teja Date: Mon, 26 Oct 2026 12:38:14 +0530 Subject: [PATCH 1/5] fix(deps): remediate zipp and httplib2 vulnerabilities Bump zipp to 3.23.1 for VULN-114209 and httplib2 to 0.32.0 for VULN-108077. --- poetry.lock | 26 +++++++++++++++----------- pyproject.toml | 3 ++- 2 files changed, 17 insertions(+), 12 deletions(-) diff --git a/poetry.lock b/poetry.lock index 0ffbadc8f..4f1339c9e 100644 --- a/poetry.lock +++ b/poetry.lock @@ -354,14 +354,14 @@ python-dateutil = ">=2.7" [[package]] name = "httplib2" -version = "0.31.2" +version = "0.32.0" description = "A comprehensive HTTP client library." optional = false -python-versions = ">=3.6" +python-versions = ">=3.8" groups = ["main"] files = [ - {file = "httplib2-0.31.2-py3-none-any.whl", hash = "sha256:dbf0c2fa3862acf3c55c078ea9c0bc4481d7dc5117cae71be9514912cf9f8349"}, - {file = "httplib2-0.31.2.tar.gz", hash = "sha256:385e0869d7397484f4eab426197a4c020b606edd43372492337c0b4010ae5d24"}, + {file = "httplib2-0.32.0-py3-none-any.whl", hash = "sha256:dc6705cacdf3fb0a2aba7629fa33c90fd93e30035db0c157325826be177e4816"}, + {file = "httplib2-0.32.0.tar.gz", hash = "sha256:48a0ef30a42db65d8f3399045e1d09ab0ba66e3b9efc360d07f80ea55d286025"}, ] [package.dependencies] @@ -777,21 +777,25 @@ files = [ [[package]] name = "zipp" -version = "3.15.0" +version = "3.23.1" description = "Backport of pathlib-compatible object wrapper for zip files" optional = false -python-versions = ">=3.7" +python-versions = ">=3.9" groups = ["main"] files = [ - {file = "zipp-3.15.0-py3-none-any.whl", hash = "sha256:48904fc76a60e542af151aded95726c1a5c34ed43ab4134b597665c86d7ad556"}, - {file = "zipp-3.15.0.tar.gz", hash = "sha256:112929ad649da941c23de50f356a2b5570c954b65150642bccdd66bf194d224b"}, + {file = "zipp-3.23.1-py3-none-any.whl", hash = "sha256:0b3596c50a5c700c9cb40ba8d86d9f2cc4807e9bedb06bcdf7fac85633e444dc"}, + {file = "zipp-3.23.1.tar.gz", hash = "sha256:32120e378d32cd9714ad503c1d024619063ec28aad2248dc6672ad13edfa5110"}, ] [package.extras] -docs = ["furo", "jaraco.packaging (>=9)", "jaraco.tidelift (>=1.4)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-lint"] -testing = ["big-O", "flake8 (<5)", "jaraco.functools", "jaraco.itertools", "more-itertools", "pytest (>=6)", "pytest-black (>=0.3.7) ; platform_python_implementation != \"PyPy\"", "pytest-checkdocs (>=2.4)", "pytest-cov", "pytest-enabler (>=1.3)", "pytest-flake8 ; python_version < \"3.12\"", "pytest-mypy (>=0.9.1) ; platform_python_implementation != \"PyPy\""] +check = ["pytest-checkdocs (>=2.4)", "pytest-ruff (>=0.2.1) ; sys_platform != \"cygwin\""] +cover = ["pytest-cov"] +doc = ["furo", "jaraco.packaging (>=9.3)", "jaraco.tidelift (>=1.4)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-lint"] +enabler = ["pytest-enabler (>=2.2)"] +test = ["big-O", "jaraco.functools", "jaraco.itertools", "jaraco.test", "more_itertools", "pytest (>=6,!=8.1.*)", "pytest-ignore-flaky"] +type = ["pytest-mypy"] [metadata] lock-version = "2.1" python-versions = ">=3.13,<3.14" -content-hash = "f46015a8497218b6527a432fcf71f90bc92b65827b165052d74ad73650809fa5" +content-hash = "0a1e7d0a8d83e1a2a4ec3eb7caf0c7874dbe537eb9711e05b6700420d2b2c7c0" diff --git a/pyproject.toml b/pyproject.toml index 94002de3f..719df9b0b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -49,8 +49,9 @@ xmlschema = "^2.5.1" splunksplwrapper = "^1.1.1" urllib3 = ">=2.5.0,<3" certifi = ">=2024.7.4" -zipp = "^3.6.0" +zipp = "3.23.1" +httplib2 = "0.32.0" [tool.poetry.group.dev.dependencies] pytest-cov = "^4" requests-mock = "^1.8.0" From c7851177d49bff8047eda850eac6df0e64d88281 Mon Sep 17 00:00:00 2001 From: Rasmi Teja Date: Mon, 26 Oct 2026 13:01:39 +0530 Subject: [PATCH 2/5] ci: use Python 3.13 for docs workflow --- .github/workflows/docs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 8e85d070d..3ad940f7b 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-python@v5 with: - python-version: 3.8 + python-version: "3.13" - run: | curl -sSL https://install.python-poetry.org | python3 - --version 1.5.1 pip install mkdocs mkdocs-material mkdocstrings-python From 67a681bca11498572374b59dbd57b20fd2a48bd1 Mon Sep 17 00:00:00 2001 From: Rasmi Teja Date: Mon, 26 Oct 2026 13:02:27 +0530 Subject: [PATCH 3/5] ci: pin docs workflow runner --- .github/workflows/docs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 3ad940f7b..d3c486629 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -9,7 +9,7 @@ on: jobs: docs: - runs-on: ubuntu-latest + runs-on: ubuntu-22.04 permissions: contents: write pages: write From 9afe2a80af8dadaf122595f40d3651e9960e77d4 Mon Sep 17 00:00:00 2001 From: Rasmi Teja Date: Mon, 26 Oct 2026 13:07:54 +0530 Subject: [PATCH 4/5] ci: use latest runner for docs workflow --- .github/workflows/docs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index d3c486629..3ad940f7b 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -9,7 +9,7 @@ on: jobs: docs: - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest permissions: contents: write pages: write From 5f06d538dca810e0380acd1b5d90e519415fb8f9 Mon Sep 17 00:00:00 2001 From: Rasmi Teja Date: Mon, 26 Oct 2026 13:12:05 +0530 Subject: [PATCH 5/5] docs: update mkdocstrings Python handler config --- mkdocs.yml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/mkdocs.yml b/mkdocs.yml index 22090ad46..968ae9ebf 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -37,11 +37,7 @@ plugins: - mkdocstrings: handlers: python: - setup_commands: - - import sys - - sys.path.append('../') - selection: - new_path_syntax: true + paths: [.] # Search the project package from the repository root. options: inherited_members: false