Skip to content

Conversation

@kossman
Copy link
Contributor

@kossman kossman commented Jan 14, 2026

Rationale

Improve security + small fix for SETTINGS

Changes

Security:

  • Upgraded internal dependency urllib3 to version urllib3 >= 2.6.3, <3.0.0 since 2.5.0 has these vulnerabilities
  • Upgraded internal dependency redis to version redis >=7.1.0, <8.0.0
  • ⚠️ Bumped a supported SDK runtime version to minimum 3.10 since new redis lib drops support for 3.9 ⚠️
    Fix:
  • Fixed issue with MAX_RETRY_COUNT

DEVC-2097


Note

Security + bugfix release (1.15.2)

  • Upgrade urllib3 dependency to >=2.6.3,<3.0.0 (was 2.5.0) in pyproject.toml
  • Fix MAX_RETRY_COUNT handling in configuration.py: add robust parsing/validation with default (DEFAULT_MAX_RETRY_COUNT=3) and warning on invalid values; switch to direct pydantic imports
  • Bump version to 1.15.2 in pyproject.toml and src/version.py
  • Adjust coverage threshold fail_under to 97.00

Written by Cursor Bugbot for commit 45cf670. Configure here.

@kossman kossman self-assigned this Jan 14, 2026
@kossman kossman requested a review from corva-alex-s January 14, 2026 13:13
@kossman kossman marked this pull request as ready for review January 14, 2026 13:14
@kossman kossman changed the title feat(DEVC-2097): upgrade urllib3 + fix MAX_RETRY_COUNT [VERSION-ONE-BRANCH] feat(DEVC-2097): upgrade urllib3 & redis + fix MAX_RETRY_COUNT [VERSION-ONE-BRANCH] Jan 15, 2026
@kossman
Copy link
Contributor Author

kossman commented Jan 15, 2026

Released new version at pypi

@kossman kossman merged commit e77846d into version-one Jan 15, 2026
24 checks passed
@kossman kossman deleted the feat/DEVC-2097-urllib3-upgrade-and-fix-for-max-retry-count branch January 15, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants