Skip to content

Commit 2867301

Browse files
Bump requests to 2.33.0 and advance granulate-utils submodule pin
Pins requests==2.33.0 (was ==2.32.4) to pick up the upstream fix for CVE-2024-47081 (.netrc credential leak via crafted URLs). This PR is self-contained: a fresh `pip install -r requirements.txt` resolves cleanly after merge. Changes: - requirements.txt: requests==2.32.4 -> 2.33.0 - granulate-utils submodule pointer: d57bcd0 -> 094d4116 Advances to pinterest/granulate-utils@master following pinterest/granulate-utils#6, which bumped granulate-utils to `requests~=2.33.0`. Without this advance the submodule would continue to pin `~=2.32.4` and pip would report a resolver conflict against the new top-level pin. - .gitmodules: corrects the URL to pinterest/granulate-utils. The pinned commit (and every Pinterest-only commit since this fork diverged from intel) lives on pinterest/granulate-utils, not intel. Before this fix, a fresh `git clone --recurse-submodules` of master could not check out the submodule, since the pinned commit isn't reachable from intel's master. Co-authored-by: Cursor <cursoragent@cursor.com>
1 parent 56273b6 commit 2867301

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

.gitmodules

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
[submodule "granulate-utils"]
22
path = granulate-utils
3-
url = https://github.com/intel/granulate-utils.git
3+
url = https://github.com/pinterest/granulate-utils.git

granulate-utils

requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
psutil==7.0.0
2-
requests==2.32.4
2+
requests==2.33.0
33
ConfigArgParse==1.7
44
distro==1.9.0
55
setuptools==78.1.1 # For pkg_resources

0 commit comments

Comments
 (0)