Bump urllib3 from 2.4.0 to 2.6.3 by dependabot[bot] · Pull Request #9 · waitesgithub/owasp-defectdojo

dependabot · 2026-01-08T05:51:51Z

Bumps urllib3 from 2.4.0 to 2.6.3.

Release notes

2.6.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by @D47A, 8.9 High, GHSA-38jv-5279-wg99)

Started treating Retry-After times greater than 6 hours as 6 hours by default. (urllib3/urllib3#3743)

Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. (urllib3/urllib3#3752)

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (urllib3/urllib3#3734)

2.6.1

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. (#3731)

2.6.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security

Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (CVE-2025-66471 reported by @Cycloctane, 8.9 High, GHSA-2xpw-w6gg-jr37)

Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (CVE-2025-66418 reported by @illia-v, 8.9 High, GHSA-gm62-xv2j-4w53)

[!IMPORTANT]

If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using urllib3[brotli] to install a compatible Brotli package automatically.

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.6.3 (2026-01-07)

Fixed a high-severity security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)

Started treating Retry-After times greater than 6 hours as 6 hours by default. ([#3743](https://github.com/urllib3/urllib3/issues/3743) <https://github.com/urllib3/urllib3/issues/3743>__)

Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. ([#3752](https://github.com/urllib3/urllib3/issues/3752) <https://github.com/urllib3/urllib3/issues/3752>__)

2.6.2 (2025-12-11)

Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. ([#3734](https://github.com/urllib3/urllib3/issues/3734) <https://github.com/urllib3/urllib3/issues/3734>__)

2.6.1 (2025-12-08)

Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. ([#3731](https://github.com/urllib3/urllib3/issues/3731) <https://github.com/urllib3/urllib3/issues/3731>__)

2.6.0 (2025-12-05)

Security

Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (GHSA-2xpw-w6gg-jr37 <https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37>__)

Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (GHSA-gm62-xv2j-4w53 <https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53>__)

.. caution::

If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using

... (truncated)

Commits

0248277 Release 2.6.3
8864ac4 Merge commit from fork
70cecb2 Fix Scorecard issues related to vulnerable dev dependencies (#3755)
41f249a Move "v2.0 Migration Guide" to the end of the table of contents (#3747)
fd4dffd Patch VerifiedHTTPSConnection for Emscripten (#3752)
13f0bfd Handle massive values in Retry-After when calculating time to sleep for (#3743)
8c480bf Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#3748)
4b40616 Bump actions/cache from 4.3.0 to 5.0.1 (#3750)
82b8479 Bump actions/download-artifact from 6.0.0 to 7.0.0 (#3749)
34284cb Mention experimental features in the security policy (#3746)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.7 to 3.8. - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.7...3.8) --- updated-dependencies: - dependency-name: markdown dependency-version: '3.8' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….github/workflows/validate_docs_build.yml) (DefectDojo#12229) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Bumps [django-crispy-forms](https://github.com/django-crispy-forms/django-crispy-forms) from 2.3 to 2.4. - [Release notes](https://github.com/django-crispy-forms/django-crispy-forms/releases) - [Changelog](https://github.com/django-crispy-forms/django-crispy-forms/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/django-crispy-forms@2.3...2.4) --- updated-dependencies: - dependency-name: django-crispy-forms dependency-version: '2.4' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.1.0 to 11.2.1. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.1.0...11.2.1) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.2.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…x/2.45.1-2.46.0-dev Release: Merge back 2.45.1 into bugfix from: master-into-bugfix/2.45.1-2.46.0-dev

….45.1-2.46.0-dev Release: Merge back 2.45.1 into dev from: master-into-dev/2.45.1-2.46.0-dev

Bumps [boto3](https://github.com/boto/boto3) from 1.37.33 to 1.37.34. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.37.33...1.37.34) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.37.34 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [html2text](https://github.com/Alir3z4/html2text) from 2024.2.26 to 2025.4.15. - [Release notes](https://github.com/Alir3z4/html2text/releases) - [Changelog](https://github.com/Alir3z4/html2text/blob/master/ChangeLog.rst) - [Commits](Alir3z4/html2text@2024.2.26...2025.4.15) --- updated-dependencies: - dependency-name: html2text dependency-version: 2025.4.15 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update how-to-write-a-parser.md - it is 4 methods that have to be added not 3 (see the numbered list 1..4 ) - the location of the doc for a new parser is now in: `docs/content/en/connecting_your_tools/parsers/<file/api>/` * Update how-to-write-a-parser.md 2 - update the import page documentation * Update docs/content/en/open_source/contributing/how-to-write-a-parser.md --------- Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

* Implement migration * Remove lower case requirement * Create common validator * UI: Apply validator * API: Apply validator * Add release notes * Add unit tests * Fixing ruff * Fix some migration updates * Applying feedback * Silly copy/paste

…ctDojo#12252) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* sla calc: add unit tests * sla calc: add unit tests * sla calc: add unit tests * linting * sla: simplify * sla config: cleanup * Update unittests/test_sla_calculations.py Co-authored-by: Blake Owens <76979297+blakeaowens@users.noreply.github.com> * Update unittests/test_sla_calculations.py Co-authored-by: Blake Owens <76979297+blakeaowens@users.noreply.github.com> * Update unittests/test_sla_calculations.py Co-authored-by: Blake Owens <76979297+blakeaowens@users.noreply.github.com> * Update unittests/test_sla_calculations.py Co-authored-by: Blake Owens <76979297+blakeaowens@users.noreply.github.com> --------- Co-authored-by: Blake Owens <76979297+blakeaowens@users.noreply.github.com>

Bumps [boto3](https://github.com/boto/boto3) from 1.37.34 to 1.37.35. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.37.34...1.37.35) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.37.35 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ctDojo#12255) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…37.7 (helm/defectdojo/values.yaml) (DefectDojo#12254) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

)

* 🎉 Implement Fortify Webinspect new report format * update * fix * update * update * update * update * update * update according to comment * docs update * fix

Bumps [boto3](https://github.com/boto/boto3) from 1.37.35 to 1.37.36. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.37.35...1.37.36) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.37.36 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…tDojo#12250) * merge all jira articles into single article * reweight articles * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> * add wiz documentation * Update docs/content/en/share_your_findings/jira_guide.md Co-authored-by: valentijnscholten <valentijnscholten@gmail.com> * update Pro features docs * reorganize support docs * rework import documentation for OS context * update changelog 2.45.1 * fix broken links --------- Co-authored-by: Paul Osinski <paul.m.osinski@gmail.com> Co-authored-by: Charles Neill <1749665+cneill@users.noreply.github.com> Co-authored-by: valentijnscholten <valentijnscholten@gmail.com>

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.11.5 to 0.11.6. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.5...0.11.6) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.11.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ctDojo#12260) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Release: Merge release into master from: release/2.45.2

…x/2.45.2-2.46.0-dev Release: Merge back 2.45.2 into bugfix from: master-into-bugfix/2.45.2-2.46.0-dev

…x/2.46.4-2.47.0-dev Release: Merge back 2.46.4 into bugfix from: master-into-bugfix/2.46.4-2.47.0-dev

Bumps [boto3](https://github.com/boto/boto3) from 1.38.22 to 1.38.23. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.38.22...1.38.23) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.38.23 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….46.4-2.47.0-dev Release: Merge back 2.46.4 into dev from: master-into-dev/2.46.4-2.47.0-dev

Bumps [cryptography](https://github.com/pyca/cryptography) from 44.0.3 to 45.0.3. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.3...45.0.3) --- updated-dependencies: - dependency-name: cryptography dependency-version: 45.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [boto3](https://github.com/boto/boto3) from 1.38.23 to 1.38.24. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.38.23...1.38.24) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.38.24 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…6.18.0 (.github/workflows/release-x-manual-docker-containers.yml) (DefectDojo#12518) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…ng title (DefectDojo#12514) * Escape javascript breaking on backlash or special characters in finding titel * Ruff formatting and W605 ignore * Fix escape character issue with \ * Remove ruff noqa comments. * Fix ruff failure on w291

Bumps vulners from 2.3.6 to 2.3.7. --- updated-dependencies: - dependency-name: vulners dependency-version: 2.3.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [boto3](https://github.com/boto/boto3) from 1.38.24 to 1.38.25. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.38.24...1.38.25) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.38.25 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* nightly-dev-fix-helm-chart-version-detection * fix release number input * make helm chart work

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.11.11 to 0.11.12. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.11...0.11.12) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.11.12 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ♻️ Deprecate async import * simplify * update * fix unittest * add docs * update

DefectDojo#12528) * Dojo Meta: Migrate to `filterset_class` + Add case Insensitive filters * Update query name

…12525) * Product Announcements: Add messages to relevant features * Specify exactly where the error is modified * Correcting ruff * Ruff can be dangerous?

Bugfix

Release: Merge release into master from: release/2.47.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.4.0 to 2.6.3. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot and others added 30 commits April 14, 2025 10:13

chore(deps): update actions/setup-node action from v4.3.0 to v4.4.0 (…

348c996

….github/workflows/validate_docs_build.yml) (DefectDojo#12229) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Merge pull request DefectDojo#12240 from DefectDojo/master-into-bugfi…

d46dfdb

…x/2.45.1-2.46.0-dev Release: Merge back 2.45.1 into bugfix from: master-into-bugfix/2.45.1-2.46.0-dev

Fixing ruff

f2ee11e

Merge pull request DefectDojo#12239 from DefectDojo/master-into-dev/2…

ed2b172

….45.1-2.46.0-dev Release: Merge back 2.45.1 into dev from: master-into-dev/2.45.1-2.46.0-dev

Deprecation notification about async import (DefectDojo#12244)

d902fbb

Update dependency vite from 6.2.6 to v6.3.0 (docs/package.json) (Defe…

d2a32bf

…ctDojo#12252) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Update dependency vite from 6.3.0 to v6.3.1 (docs/package.json) (Defe…

cfd640f

…ctDojo#12255) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.37.6 to v1.…

744cce5

…37.7 (helm/defectdojo/values.yaml) (DefectDojo#12254) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

🎉 Add Amazon Linux Security Center aadvisory to vulnid (DefectDojo#12242

bd59489

)

🎉 Implement Fortify Webinspect new report format (DefectDojo#12155)

c5f921d

* 🎉 Implement Fortify Webinspect new report format * update * fix * update * update * update * update * update * update according to comment * docs update * fix

Update base.html (DefectDojo#12228)

8f7936e

Update dependency vite from 6.3.1 to v6.3.2 (docs/package.json) (Defe…

841df51

…ctDojo#12260) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Update versions in application files

78a8bfc

Merge pull request DefectDojo#12286 from DefectDojo/release/2.45.2

8e7cc01

Release: Merge release into master from: release/2.45.2

Update versions in application files

ffad037

Update versions in application files

18613df

Merge branch 'dev' into master-into-dev/2.45.2-2.46.0-dev

3ae4570

Merge pull request DefectDojo#12288 from DefectDojo/master-into-bugfi…

ae199cb

…x/2.45.2-2.46.0-dev Release: Merge back 2.45.2 into bugfix from: master-into-bugfix/2.45.2-2.46.0-dev

rossops and others added 24 commits May 27, 2025 11:33

Merge branch 'dev' into master-into-dev/2.46.4-2.47.0-dev

cd686f1

Merge pull request DefectDojo#12516 from DefectDojo/master-into-bugfi…

08c5f4a

…x/2.46.4-2.47.0-dev Release: Merge back 2.46.4 into bugfix from: master-into-bugfix/2.46.4-2.47.0-dev

Fixing linter issue (DefectDojo#12519)

101c776

Merge pull request DefectDojo#12517 from DefectDojo/master-into-dev/2…

e69d6bb

….46.4-2.47.0-dev Release: Merge back 2.46.4 into dev from: master-into-dev/2.46.4-2.47.0-dev

check for existing issue inside celery task (DefectDojo#12508)

1f04a4f

chore(deps): update docker/build-push-action action from v6.17.0 to v…

ec2e5fd

…6.18.0 (.github/workflows/release-x-manual-docker-containers.yml) (DefectDojo#12518) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

fix gap between component header and filter body (DefectDojo#12503)

69d0d57

Implement ELA vulnid (DefectDojo#12510)

2f27ebe

remove google sheets leftovers (DefectDojo#12509)

9d99c62

Fix helm chart for nightly-dev builds (DefectDojo#12504)

7c4bef4

* nightly-dev-fix-helm-chart-version-detection * fix release number input * make helm chart work

♻️ Remove async import (DefectDojo#12042)

9225090

* ♻️ Deprecate async import * simplify * update * fix unittest * add docs * update

Dojo Meta: Migrate to filterset_class + Add case Insensitive filters (

d720d38

DefectDojo#12528) * Dojo Meta: Migrate to `filterset_class` + Add case Insensitive filters * Update query name

Product Announcements: Add messages to relevant features (DefectDojo#…

4ca3098

…12525) * Product Announcements: Add messages to relevant features * Specify exactly where the error is modified * Correcting ruff * Ruff can be dangerous?

Merge pull request DefectDojo#12541 from DefectDojo/bugfix

446088d

Bugfix

Update versions in application files

bc61e4c

Merge pull request DefectDojo#12542 from DefectDojo/release/2.47.0

fe38beb

Release: Merge release into master from: release/2.47.0

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 8, 2026

dependabot Bot mentioned this pull request Jan 8, 2026

Bump urllib3 from 2.4.0 to 2.6.0 #8

Closed

waitesgithub force-pushed the master branch from fe38beb to 34de392 Compare August 26, 2026 00:39

Navigation Menu

Bump urllib3 from 2.4.0 to 2.6.3 - #9

Bump urllib3 from 2.4.0 to 2.6.3#9
dependabot[bot] wants to merge 10000 commits into
masterfrom
dependabot/pip/urllib3-2.6.3

dependabot Bot commented on behalf of github Jan 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

dependabot Bot commented on behalf of github Jan 8, 2026

2.6.3

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.1

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.0

🚀 urllib3 is fundraising for HTTP/2 support

Security

2.6.3 (2026-01-07)

2.6.2 (2025-12-11)

2.6.1 (2025-12-08)

2.6.0 (2025-12-05)

Security

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants