Skip to content

Commit

Permalink
Relax 'requests' dependency
Browse files Browse the repository at this point in the history
Let it pick the version from the distribution.
Note the versioned dependency in salt was due to
GHSA-9wx4-h78v-vm56,
so it's not great, but doesn't affect our use case (the verify= option
with possibly non-true value is used when talking to S3, which we don't
use). In any case, let the update be handled by the distribution.
  • Loading branch information
marmarek committed Sep 19, 2024
1 parent 517ac0f commit e2df3a5
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions 0001-Drop-versioned-certifi-dependency.patch
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ Date: Thu, 15 Aug 2024 03:46:12 +0200
Subject: [PATCH] Drop versioned certifi dependency

Let it pick the version from the distribution.
Similarly for requests.
---
requirements/base.txt | 2 --
1 file changed, 2 deletions(-)
Expand All @@ -13,10 +14,13 @@ diff --git a/requirements/base.txt b/requirements/base.txt
index de9cbaab17..bce14bc510 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -7,8 +7,6 @@ PyYAML
@@ -7,10 +7,7 @@ PyYAML
msgpack>=1.0.0
PyYAML
MarkupSafe
requests<2.32.0 ; python_version < '3.10'
requests>=2.32.3 ; python_version >= '3.10'
-requests<2.32.0 ; python_version < '3.10'
-requests>=2.32.3 ; python_version >= '3.10'
+requests
-certifi==2023.07.22; python_version < '3.10'
-certifi>=2024.7.4; python_version >= '3.10'
distro>=1.0.1
Expand Down

0 comments on commit e2df3a5

Please sign in to comment.