Conversation
There was a problem hiding this comment.
Pull request overview
Updates Python dependency versions to address Dependabot-reported vulnerabilities for the cdot-wzdx-translator package (Poetry-managed), primarily by bumping requests and explicitly pinning several previously-transitive dependencies to patched versions.
Changes:
- Bump
requestsand update the resolved dependency graph inpoetry.lock. - Add explicit pins for several packages (e.g.,
urllib3,protobuf,cryptography, etc.) to force patched versions. - Shift multiple packages from dev-only resolution into the
maindependency group viapyproject.tomlchanges.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
pyproject.toml |
Updates requests and adds multiple explicit dependency pins intended to address vulnerability findings. |
poetry.lock |
Re-locks dependencies to newer versions; several packages shift into main group and/or change platform markers. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 3 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Resolving all vulnerabilities detected by dependabot analysis as of 2026/3/26: https://github.com/CDOT-CV/Work_Zone/security/dependabot
This PR also bumps the release version to 1.4.7rc1