Skip to content

Remove botocore.vendored.requests #195

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
countergram opened this issue Aug 29, 2019 · 3 comments
Closed

Remove botocore.vendored.requests #195

countergram opened this issue Aug 29, 2019 · 3 comments
Milestone
v2.0.3

Comments

@countergram
Copy link

Botocore's vendored requests should not be used.

  • Botocore itself no longer uses its vendored requests, and only keeps it around for exceptions.
  • The vendored requests version is stale and not being updated.
  • The vendored requests version is subject to open CVEs and is not being patched.
  • A future botocore version will remove vendoring.

References:
@smtakeda smtakeda added the jira label Aug 29, 2019
@countergram
Copy link
Author

See also boto/botocore#1829 regarding the plan to remove vendored requests from botocore & the necessity of doing this for Python 3.8 support.

@smtakeda
Copy link
Contributor

FYI, actively working on the fix a botocore 1.13.0 is out.

@smtakeda smtakeda mentioned this issue Oct 25, 2019
Closed
@sfc-gh-stakeda sfc-gh-stakeda added this to the v2.0.3 milestone Nov 1, 2019
@sfc-gh-stakeda
Copy link
Contributor

Fixed in v2.0.3

@smtakeda smtakeda mentioned this issue Nov 11, 2019
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
v2.0.3
Development

No branches or pull requests
3 participants
@countergram @smtakeda @sfc-gh-stakeda