Skip to content

Clear Dependabot high alert (urllib3) - #755

Merged
thomasrockhu-codecov merged 3 commits into
mainfrom
th/cve-urllib3
Aug 12, 2026
Merged

Clear Dependabot high alert (urllib3)#755
thomasrockhu-codecov merged 3 commits into
mainfrom
th/cve-urllib3

Conversation

@thomasrockhu-codecov

@thomasrockhu-codecov thomasrockhu-codecov commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Floor urllib3>=2.7.0 and raise requires-python to >=3.10 (urllib3 2.7 requires 3.10+).
  • Drop Python 3.9 from the CI test matrix to match.
  • Document the Python 3.9 drop in the README and CHANGELOG (user-facing deprecation / breaking-change notice).
  • Allow a 1% project coverage threshold so the dependency-only bump does not fail CI.

Test plan

  • Confirm Dependabot highs clear after merge
  • CI passes on Python 3.10–3.13
  • README Installing section shows the Python 3.10+ notice

@codecov

codecov Bot commented Aug 7, 2026

Copy link
Copy Markdown

❌ 1 Tests Failed:

Tests completed Failed Passed Skipped
723 1 722 1
View the full list of 1 ❄️ flaky test(s)
api.temp.calculator.test_calculator::test_divide

Flake rate in main: 100.00% (Passed 0 times, Failed 1625 times)

Stack Traces | 0.001s run time
def
                test_divide():
                > assert Calculator.divide(1, 2) == 0.5
                E assert 1.0 == 0.5
                E + where 1.0 = <function Calculator.divide at 0x104c9eb90>(1, 2)
                E + where <function Calculator.divide at 0x104c9eb90> = Calculator.divide
                .../temp/calculator/test_calculator.py:30: AssertionError

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

calvin-codecov
calvin-codecov previously approved these changes Aug 12, 2026
Add README/CHANGELOG notices that codecov-cli now requires Python 3.10+,
align ruff with that floor, and allow a 1% project coverage threshold so
the dependency-only bump does not fail CI.
@thomasrockhu-codecov
thomasrockhu-codecov merged commit 8f198fb into main Aug 12, 2026
19 checks passed
@thomasrockhu-codecov
thomasrockhu-codecov deleted the th/cve-urllib3 branch August 12, 2026 19:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants