Skip to content

Conversation

Copy link

Copilot AI commented Jan 8, 2026

Upgrades project from Python 3.8 to 3.12 and patches 3 critical urllib3 vulnerabilities (decompression bomb exploits, unbounded decompression chains).

Changes

  • Pipfile: Python version 3.83.12, urllib3 constraint <=1.26.18>=2.6.3
  • Pipfile.lock: Regenerated with Python 3.12, all dependencies updated to latest compatible versions
  • .gitlab-ci.yml: CI image python:3.8python:3.12

Dependency Updates

Package Version Change
urllib3 1.26.18 → 2.6.3
pylint 2.9.3 → 4.0.4
mypy 0.910 → 1.19.1
astroid 2.6.2 → 4.0.3
isort 5.9.2 → 7.0.0

All dependencies verified clean against GitHub Advisory Database.

Original prompt

Upgrade this project to python 3.12 and make sure to address all dependbot issues with risk package dependencies


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Co-authored-by: dudil <4785835+dudil@users.noreply.github.com>
Copilot AI changed the title [WIP] Upgrade project to Python 3.12 and address Dependabot issues Upgrade to Python 3.12 and resolve urllib3 security vulnerabilities Jan 8, 2026
Copilot AI requested a review from dudil January 8, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants