Merge pull request #12648 from RasaHQ/deps/bump-requests-2.31.0-3.4.x

radovanZRasa · web-flow · commit 96de264ab41b · 2023-07-11T18:54:09.000+02:00
Update requests to 2.31.0 on 3.4.x
diff --git a/changelog/12648.misc.md b/changelog/12648.misc.md
@@ -0,0 +1 @@
+Update requests to 2.31.0 to fix CVE-2023-32681.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -68,7 +68,7 @@ showcontent = false
 [tool.poetry.dependencies]
 python = ">=3.7,<3.11"
 boto3 = "^1.12"
-requests = "^2.23"
+requests = "^2.31"
 matplotlib = ">=3.1,<3.6"
 attrs = ">=19.3,<22.2"
 jsonpickle = ">=1.3,<2.3"

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Update requests to 2.31.0 to fix CVE-2023-32681.`