Projets/ObsiGate
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

fix: plancher urllib3>=2.8.0 pour CVE-2026-97687/97688/97689 + garde-fou CI
CI / lint (push) Successful in 2m39s
Details
CI / security (push) Successful in 2m5s
Details
CI / test (push) Successful in 4m35s
Details
CI / build (push) Successful in 2m43s
Details
CI / e2e (push) Successful in 15m26s
Details

Browse Source 
- backend/requirements.txt : plancher urllib3>=2.8.0 (3 CVE corrigées)
- .gitea/workflows/ci.yml : documentation des nouveaux planchers
- tests/test_ci_workflow.py : garde-fou urllib3 ajouté dans TestDependencySecurityFloors

Corrige l'échec du job security (pip-audit bloquant sur urllib3 2.7.0)
This commit is contained in:
bruno
2026-10-01 12:20:46 -04:00
parent 66a5505965
commit 562290d922
12 changed files with 28 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_ci_workflow.py
+1
View File
@@ -254,6 +254,7 @@ class TestDependencySecurityFloors:
"pypdf": (6, 16, 1), # PYSEC-2026-3910, PYSEC-2026-3911 (fix 6.16.1)
# BUG-095 : 2.13.0 a son propre advisory (CVE-2026-102274, fix 2.14.0).
"pyjwt": (2, 14, 0), # PYSEC-2026-178 (2.13.0) puis CVE-2026-102274 (2.14.0)
"urllib3": (2, 8, 0), # CVE-2026-97687, CVE-2026-97688, CVE-2026-97689 (fix 2.8.0)
}
def test_security_floors_are_declared(self):