Skip to content

Conversation

@chtruong814
Copy link
Contributor

@chtruong814 chtruong814 commented Jan 17, 2026

What does this PR do ?

Update pyasn1 to >= 0.6.2

Addresses this CVE:
GHSA-63vm-454h-vhhq

Issues

List issues that this PR closes (syntax):

Usage

  • You can potentially add a usage example below
# Add a code snippet demonstrating how to use this

Before your PR is "Ready for review"

Pre checks:

  • Make sure you read and followed Contributor guidelines
  • Did you write any new necessary tests?
  • Did you run the unit tests and functional tests locally? Visit our Testing Guide for how to run tests
  • Did you add or update any necessary documentation? Visit our Document Development Guide for how to write, build and test the docs.

Additional Information

  • ...

Summary by CodeRabbit

  • Chores
    • Updated project dependencies to address security vulnerabilities and enhance application stability.

✏️ Tip: You can customize this high-level summary in your review settings.

Signed-off-by: Charlie Truong <chtruong@nvidia.com>
@chtruong814 chtruong814 requested a review from a team as a code owner January 17, 2026 17:43
@chtruong814 chtruong814 added the CI:L1 Run doctests, unit tests, and functional tests label Jan 17, 2026
@chtruong814 chtruong814 changed the title Update pyasn1 to >= 0.6.2 build: Update pyasn1 to >= 0.6.2 Jan 17, 2026
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 17, 2026

📝 Walkthrough

Walkthrough

Added a new constraint dependency pyasn1>=0.6.2 to the constraint-dependencies section in pyproject.toml to address CVE vulnerabilities.

Changes

Cohort / File(s) Summary
Dependency constraint update
pyproject.toml
Added pyasn1>=0.6.2 constraint dependency to address security vulnerabilities

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested labels

CI:L1

Suggested reviewers

  • terrykong
🚥 Pre-merge checks | ✅ 4
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Test Results For Major Changes ✅ Passed This PR contains a minor dependency version constraint update for security purposes, which does not require test results documentation.
Title check ✅ Passed The pull request title 'Update pyasn1 to >= 0.6.2' directly and clearly summarizes the main change: updating a dependency version to address a security advisory.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI:L1 Run doctests, unit tests, and functional tests r0.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants