fix(deps): bump requests to 2.34.2 to remediate CVE-2026-25645

RoiGlinik · claude · RoiGlinik · commit cf6d8d6276b1 · 2026-06-23T11:52:33.000+03:00
Co-Authored-By: Claude Opus 4.7 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -33,7 +33,7 @@ alive-progress = "^3.1.2"
 prometrix = "0.2.11"
 slack-sdk = "^3.21.3"
 pandas = "2.2.2"
-requests = ">2.32.4"
+requests = ">=2.33.0"
 pyyaml = "6.0.1"
 typing-extensions = "4.6.0"
 idna = "3.7"
diff --git a/requirements.txt b/requirements.txt
@@ -37,7 +37,7 @@ pytz==2024.1 ; python_version >= "3.10" and python_full_version < "3.13"
 pyyaml==6.0.1 ; python_version >= "3.10" and python_full_version < "3.13"
 regex==2023.12.25 ; python_version >= "3.10" and python_full_version < "3.13"
 requests-oauthlib==1.4.1 ; python_version >= "3.10" and python_full_version < "3.13"
-requests==2.32.5 ; python_version >= "3.10" and python_full_version < "3.13"
+requests==2.34.2 ; python_version >= "3.10" and python_full_version < "3.13"
 rich==12.6.0 ; python_version >= "3.10" and python_full_version < "3.13"
 rsa==4.9 ; python_version >= "3.10" and python_full_version < "3.13"
 s3transfer==0.16.0 ; python_version >= "3.10" and python_full_version < "3.13"
