security: CVE-2023-32681: bump requests@2.31.0

- Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects. Details at [Github Advisory](GHSA-j8r2-6x86-q33q) Signed-off-by: Hiroshi Miura <miurahr@linux.com>
miurahr · Nov 3, 2023 · 349a75f · 349a75f
1 parent 0110f2f
commit 349a75f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pyproject.toml b/pyproject.toml
@@ -27,7 +27,7 @@ dependencies = [
     "humanize",
     "patch>=1.16",
     "py7zr>=0.20.6",
-    "requests>2.20.0",
+    "requests>=2.31.0",
     "semantic-version",
     "texttable",
 ]