From b1556a47170032be566eaaa8db0b944b17fc4ab3 Mon Sep 17 00:00:00 2001 From: jerevoss Date: Tue, 6 Jun 2023 14:37:45 -0700 Subject: [PATCH 1/2] Removed vulnerable versions of flask and requests --- contrib/opencensus-ext-flask/setup.py | 2 +- contrib/opencensus-ext-requests/setup.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/contrib/opencensus-ext-flask/setup.py b/contrib/opencensus-ext-flask/setup.py index 63aa51329..b7164a205 100644 --- a/contrib/opencensus-ext-flask/setup.py +++ b/contrib/opencensus-ext-flask/setup.py @@ -49,7 +49,7 @@ include_package_data=True, long_description=open('README.rst').read(), install_requires=[ - 'flask >= 0.12.3, < 3.0.0, != 1.1.3', + 'flask >= 0.12.3, < 3.0.0, != 1.1.3, != 2.2.3, != 2.2.4', 'opencensus >= 0.12.dev0, < 1.0.0', ], extras_require={}, diff --git a/contrib/opencensus-ext-requests/setup.py b/contrib/opencensus-ext-requests/setup.py index 5d6dad59f..33a771536 100644 --- a/contrib/opencensus-ext-requests/setup.py +++ b/contrib/opencensus-ext-requests/setup.py @@ -49,7 +49,7 @@ include_package_data=True, long_description=open('README.rst').read(), install_requires=[ - 'opencensus >= 0.12.dev0, < 1.0.0', + 'opencensus >= 0.12.dev0, < 1.0.0, != 2.28.2, != 2.29.0, != 2.30.0', 'requests >= 2.19.0, < 3.0.0', 'wrapt >= 1.0.0, < 2.0.0', ], From 8e0a272b7ac33f58c95d8917e0990244336e20aa Mon Sep 17 00:00:00 2001 From: jerevoss Date: Tue, 6 Jun 2023 14:48:04 -0700 Subject: [PATCH 2/2] changelog --- contrib/opencensus-ext-flask/CHANGELOG.md | 2 ++ contrib/opencensus-ext-requests/CHANGELOG.md | 2 ++ 2 files changed, 4 insertions(+) diff --git a/contrib/opencensus-ext-flask/CHANGELOG.md b/contrib/opencensus-ext-flask/CHANGELOG.md index 4a0f95c98..f7b0c4431 100644 --- a/contrib/opencensus-ext-flask/CHANGELOG.md +++ b/contrib/opencensus-ext-flask/CHANGELOG.md @@ -4,6 +4,8 @@ - Add exception information to span attributes ([#1188](https://github.com/census-instrumentation/opencensus-python/pull/1188)) +- Removed vulnerable versions of flask +([#1207](https://github.com/census-instrumentation/opencensus-python/pull/1207)) ## 0.8.1 Released 2022-08-03 diff --git a/contrib/opencensus-ext-requests/CHANGELOG.md b/contrib/opencensus-ext-requests/CHANGELOG.md index ac6f5f597..f9060ff95 100644 --- a/contrib/opencensus-ext-requests/CHANGELOG.md +++ b/contrib/opencensus-ext-requests/CHANGELOG.md @@ -9,6 +9,8 @@ Released 2022-08-03 ([#1143](https://github.com/census-instrumentation/opencensus-python/pull/1143)) - Add `requests` library as a hard dependency ([#1146](https://github.com/census-instrumentation/opencensus-python/pull/1146)) +- Removed vulnerable versions of requests +([#1207](https://github.com/census-instrumentation/opencensus-python/pull/1207)) ## 0.7.5 Released 2021-05-13