Ouranosinc / xscen / 36862705616
90%

DEFAULT BRANCH: main
Ran
Jobs 11
Files 17
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 90.171%. Remained the same
36862705616

push

github

web-flow 
Bump urllib3 from 2.7.0 to 2.8.0 in /CI (#781)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/urllib3/urllib3/releases">urllib3's
releases</a>.</em></p>
<blockquote>
<h2>2.8.0</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project. If your company or
organization uses Python and would benefit from HTTP/2 support in
Requests, pip, cloud SDKs, and thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Security</h2>
<p>Fixed the following security issues:</p>
<ul>
<li>The TLS configuration for HTTPS proxies could be ignored or
overridden. (High severity, GHSA-8988-9cw3-xx77)</li>
<li><code>HTTPResponse.stream()</code> and <code>read_chunked()</code>
could buffer a chunk-size line of unbounded length in memory. (High
severity, GHSA-vxq7-64xx-v4gw)</li>
<li>Chunked Deflate streaming could enter an infinite loop. (Medium
severity, GHSA-gh4c-6fx4-qh6g)</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
urllib3 2.8.0 fixes HTTPS proxy TLS configuration being ignored or
overridden by destination settings. Configurations relying on that
behavior may require changes.</p>
<p>Configure proxy CA certificates and client certificates in
<code>proxy_ssl_context</code>, and proxy identity checks with
<code>proxy_assert_hostname</code> or
<code>proxy_assert_fingerprint</code>. Destination client certificates
and identity overrides no longer apply to HTTPS forwarding proxy
connections.</p>
</blockquote>
<blockquote>
<p>[!NOTE]
CVE IDs had not yet been assigned to these advisories ... (continued)

4477 of 4965 relevant lines covered (90.17%)

9.75 hits per line

Jobs
ID Job ID Ran Files Coverage
1 run-Python3.11-conda-ubuntu-latest - 36862705616.1 17
89.95
GitHub Action Run
2 run-Python3.12-pypi-ubuntu-latest - 36862705616.2 17
87.65
GitHub Action Run
3 run-Python3.10-pypi-ubuntu-latest - 36862705616.3 17
87.41
GitHub Action Run
4 run-Python3.13-conda-ubuntu-latest - 36862705616.4 17
89.95
GitHub Action Run
5 run-Python3.12-conda-ubuntu-latest - 36862705616.5 17
89.95
GitHub Action Run
6 run-Python3.10-conda-ubuntu-latest - 36862705616.6 17
89.63
GitHub Action Run
7 run-Python3.14-pypi-ubuntu-latest - 36862705616.7 17
87.65
GitHub Action Run
8 run-Python3.14-conda-ubuntu-latest - 36862705616.8 17
89.95
GitHub Action Run
9 run-Python3.11-pypi-ubuntu-latest - 36862705616.9 17
87.65
GitHub Action Run
10 run-Python3.12-pypi-macos-latest - 36862705616.10 17
87.59
GitHub Action Run
11 run-Python3.13-pypi-ubuntu-latest - 36862705616.11 17
87.65
GitHub Action Run
Source Files on build 36862705616