NO-JIRA: ci(deps): bump httplib2 from 0.22.0 to 0.32.0 in /hypershift-ci-python - #9124
NO-JIRA: ci(deps): bump httplib2 from 0.22.0 to 0.32.0 in /hypershift-ci-python#9124dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.22.0 to 0.32.0. - [Changelog](https://github.com/httplib2/httplib2/blob/master/CHANGELOG) - [Commits](httplib2/httplib2@v0.22.0...v0.32.0) --- updated-dependencies: - dependency-name: httplib2 dependency-version: 0.32.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Pipeline controller notification For optional jobs, comment This repository is configured in: LGTM mode |
📝 WalkthroughWalkthroughThe pinned 🚥 Pre-merge checks | ✅ 11✅ Passed checks (11 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
openshift-ci
Bot
added
the
needs-ok-to-test
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@hypershift-ci-python/requirements.txt`:
- Line 10: Add SHA256 artifact hashes for both the wheel and sdist associated
with httplib2==0.32.0 in requirements.txt, using the package’s published hashes
while preserving the existing version pin.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository YAML (base), Central YAML (inherited)
Review profile: CHILL
Plan: Enterprise
Run ID: 52fffdc4-ae2c-4ff6-b256-d5755c582658
📒 Files selected for processing (1)
hypershift-ci-python/requirements.txt
| google-auth-oauthlib==1.2.1 | ||
| googleapis-common-protos==1.68.0 | ||
| httplib2==0.22.0 | ||
| httplib2==0.32.0 |
There was a problem hiding this comment.
🔒 Security & Privacy | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '== requirements file ==\n'
cat -n hypershift-ci-python/requirements.txt
printf '\n== nearby requirements-related files ==\n'
git ls-files '*requirements*.txt' 'Pipfile*' 'pyproject.toml' 'package*.json' 'go.mod' 'go.sum' 'Cargo.toml' 'Gemfile*' 'pom.xml' 'build.gradle*'
printf '\n== hash usage in requirements files ==\n'
rg -n --hidden --glob '!*node_modules*' --glob '!*dist*' --glob '!*build*' --glob '!*venv*' --glob '!*\.git*' --fixed-strings '--hash=' hypershift-ci-python .Repository: openshift/hypershift
Length of output: 1106
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '== hash usage in requirements-like files ==\n'
rg -n --fixed-strings -- '--hash=' hypershift-ci-python contrib docs vendor hack/tools/vendor . || true
printf '\n== any pip-tools / constraints references ==\n'
rg -n --hidden -g 'requirements*.txt' -g 'constraints*.txt' -g 'Pipfile*' -g 'pyproject.toml' -g 'setup.cfg' -g 'setup.py' -g 'tox.ini' -g 'Makefile' 'pip-compile|--generate-hashes|--hash=' .Repository: openshift/hypershift
Length of output: 248
🌐 Web query:
PyPI httplib2 0.32.0 json wheel sdist sha256 hashes
💡 Result:
The Python package httplib2 version 0.32.0 was released on June 26, 2026 [1][2]. While official SHA256 hashes for PyPI releases are typically found directly on the PyPI project page under the 'Download files' section for a specific version, historical or build-system records provide the following known hash for the distribution: The SHA256 hash for the file httplib2-0.32.0-py3-none-any.whl is reported as: dc6705cacdf3fb0a2aba7629fa33c90fd93e30035db0c157325826be177e4816 [3]. For the source distribution (sdist), the tarball v0.32.0.tar.gz is associated with the following SHA256 hash: 14e842d2041ae3cf11f2e82f1b3454e0283050cc38599ed87d116e005097e470 [4]. For the most authoritative verification, you should always check the SHA256 hash listed directly on the PyPI project page for httplib2 0.32.0 [5].
Citations:
- 1: https://deps.dev/pypi/httplib2/0.32.0
- 2: https://pypi.org/project/httplib2/
- 3: https://raw.githubusercontent.com/Ravenports/Ravenports/master/bucket_13/python-httplib2
- 4: https://raw.githubusercontent.com/getsolus/packages/main/packages/py/python-httplib2/package.yml
- 5: https://pypi.org/project/httplib2/0.32.0/
Add artifact hashes for httplib2==0.32.0. The version is pinned, but pip still won’t verify the wheel or sdist download without --hash entries.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@hypershift-ci-python/requirements.txt` at line 10, Add SHA256 artifact hashes
for both the wheel and sdist associated with httplib2==0.32.0 in
requirements.txt, using the package’s published hashes while preserving the
existing version pin.
Source: Path instructions
|
/retitle NO-JIRA: ci(deps): bump httplib2 from 0.22.0 to 0.32.0 in /hypershift-ci-python |
openshift-ci
Bot
changed the title
openshift-ci-robot
added
the
jira/valid-reference
|
@dependabot[bot]: This pull request explicitly references no jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci-robot
added
the
verified
|
@mgencur: The DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
Scheduling tests matching the |
|
/area dependency |
openshift-ci
Bot
added
area/dependency
|
/ok-to-test |
openshift-ci
Bot
added
ok-to-test
|
This PR is replaced by #9135 . It will address the comment from CodeRabbit here: #9124 (comment) /close |
|
@mgencur: Closed this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
2 participants
Bumps httplib2 from 0.22.0 to 0.32.0.
Changelog
Sourced from httplib2's changelog.
Commits
ba9bf50v0.32.0 release87581addecompression limited by size and ratio; require python 3.8+a99a11fv0.31.2 release370010adep-compat: pp.DelimitedList (camel case) only available in pyparsing>=3.16d2ea32v0.31.1 released1b0ce3auth: use pyparsing v3 PEP8-compliant method names3288ba7chore: harden publishing. use github attestations26cfea5v0.31.0 releasecbd3d21chore: CI use trusted publishing147d7d5https: avoid costly load_verify_locations when SSL certificate validation is ...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by CodeRabbit
httplib2dependency to version 0.32.0.