Upgrade to latest h11 and httpcore

[gpchandran]

Hi @michael-s-molina @mistercrunch @sadpandajoe
Need your help for upgrading h11 and httpcore for vulnerabilities remediation, can I create for PR for this?

h11==0.16.0 and httpcore==1.0.9

[mistercrunch]

#33339

[mistercrunch]

I don't think httpcore is in our dep list (?)

[gpchandran]

Thanks @mistercrunch Max for your response

#10 110.7 The conflict is caused by:
#10 110.7 The user requested h11==0.15.0
#10 110.7 httpcore 0.15.0 depends on h11<0.13 and >=0.11

Tried to upgrade h11 to latest on Superset 4.1.2 , getting above error, please advise. need your help in upgrade Superset's h11 to 0.16.0
https://pypi.org/project/h11/#history

[mistercrunch]

Looks like h11==0.16.0 doesn't require httpcore, maybe that was something related to 0.15.0, in any case, looks like #33339 will take care of the concerns raised here.

[gpchandran]

Thanks Max , will check it out But I got same dependency error upgrading h11 .15.0 or 0.16.0 Thanks, Best Regards, Pooranachandran Ganesan (Poorna) +1-612-222-0318

…

On Sun, May 4, 2025, 2:28 PM Maxime Beauchemin ***@***.***> wrote: Looks like h11==0.16.0 doesn't require httpcore, maybe that was something related to 0.15.0, in any case, looks like #33339 <#33339> will take care of the concerns raised here. — Reply to this email directly, view it on GitHub <#33299 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACIDAIIAIPFZFX3MKU6HWDL24ZS6NAVCNFSM6AAAAAB4FYNRL6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTGMBTGI3TENI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[gpchandran]

hi @michael-s-molina - can you please merge this PR #33339 into master and 5.0.0?

[mistercrunch]

I rebased the PR, can merge after CI passes