From d3ee8de2b29ac04717fd83c9aca6de30629d211c Mon Sep 17 00:00:00 2001 From: dsinghvi <10870189+dsinghvi@users.noreply.github.com> Date: Mon, 20 Apr 2026 13:39:25 +0000 Subject: [PATCH] update changelogs --- .../sdks/generators/python/changelog/2026-04-20.mdx | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fern/products/sdks/generators/python/changelog/2026-04-20.mdx diff --git a/fern/products/sdks/generators/python/changelog/2026-04-20.mdx b/fern/products/sdks/generators/python/changelog/2026-04-20.mdx new file mode 100644 index 000000000..429361a52 --- /dev/null +++ b/fern/products/sdks/generators/python/changelog/2026-04-20.mdx @@ -0,0 +1,8 @@ +## 5.5.3 +**`(chore):`** Bump generated `pytest` dev dependency from `^8.2.0` to `^9.0.3` for SDKs +targeting Python 3.9+. This addresses CVE-2025-71176 (GHSA-6w46-j5rx-g56g), +a moderate-severity issue with insecure `/tmp/pytest-of-{user}` handling +on UNIX. Projects that still support Python 3.8 continue to use `pytest ^7.4.0` +since pytest 9 requires Python 3.9+. + +