Skip to content

Pin requests to 2.32.4 or newer#643

Open
hamizan-azman wants to merge 1 commit into
OpenBMB:mainfrom
hamizan-azman:codex/chatdev-requests-floor
Open

Pin requests to 2.32.4 or newer#643
hamizan-azman wants to merge 1 commit into
OpenBMB:mainfrom
hamizan-azman:codex/chatdev-requests-floor

Conversation

@hamizan-azman

Copy link
Copy Markdown

This pins requests to >=2.32.4 in both dependency declarations.

The lockfile already resolves requests to 2.32.5; this PR just records the minimum safe version so future installs do not accidentally allow older affected versions.

Closes #642.

Validation:

  • uv lock --check
  • uv sync --frozen --no-dev --dry-run
  • Confirmed the frozen export still resolves requests==2.32.5
  • git diff --check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependency hardening: pin minimum safe dependency versions

1 participant