Skip to content

fix: upgrade requests to 2.22.0#1200

Merged
sriram-mv merged 1 commit intoaws:developfrom
michael-k:requests
Jun 3, 2019
Merged

fix: upgrade requests to 2.22.0#1200
sriram-mv merged 1 commit intoaws:developfrom
michael-k:requests

Conversation

@michael-k
Copy link
Contributor

@michael-k michael-k commented May 29, 2019

Issue #, if available: n/a

Description of changes:

  • Bump requests from 2.20.0 to 2.22.0
  • Update make_service_response for readability and dynamic inclusion of requests' version number

Upgrading requests to 2.22 lifts the upper bound of urllib3 to <1.26. urllib3 1.25 includes fixes for the following vulnerabilities CVE-2019-9740 and CVE-2019-112369 which were also backported to the 1.24 series (included in release 1.24.3).

urllib3 1.25.2+ includes also other improvements like certificate validation, TLSv1.3 support, Brotli support, …. See https://github.com/urllib3/urllib3/blob/1.25.3/CHANGES.rst

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@michael-k michael-k changed the title fix: upgrade requests to 2.22.* fix: upgrade requests to 2.22.0 May 29, 2019
Copy link
Contributor

@jfuss jfuss left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the patch and the great enhancement to the functional tests!

@sriram-mv sriram-mv merged commit 1d845eb into aws:develop Jun 3, 2019
@michael-k michael-k deleted the requests branch June 4, 2019 08:44
@jonringer jonringer mentioned this pull request Aug 22, 2019
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants