Skip to content

Commit 7d682e2

Browse files
authored
Bump httplib2 upper bound to <1.0.0 (#39280)
This allows for httplib2 0.32.0 which includes a fix for CVE-2026-59939. Resolves #39279.
1 parent 3e7885d commit 7d682e2

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

sdks/python/setup.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -421,7 +421,7 @@ def get_portability_package_data():
421421
'fastavro>=0.23.6,<2',
422422
'fasteners>=0.3,<1.0',
423423
'grpcio>=1.33.1,<2,!=1.48.0,!=1.59.*,!=1.60.*,!=1.61.*,!=1.62.0,!=1.62.1,!=1.66.*,!=1.67.*,!=1.68.*,!=1.69.*,!=1.70.*', # pylint: disable=line-too-long
424-
'httplib2>=0.8,<0.32.0',
424+
'httplib2>=0.8,<1.0.0',
425425
'jsonpickle>=3.0.4,<5.0.0',
426426
# numpy can have breaking changes in minor versions.
427427
# Use a strict upper bound.

0 commit comments

Comments
 (0)