Postulo/postulo
Postulo/postulo
Watch
3
0
Fork
You've already forked postulo
 0
Code Issues 83 Pull requests Projects Releases 4 Packages 1 Wiki Activity Actions

Move brotli to 1.2.1, past PYSEC-2026-4322 #1039

Closed
tiagoagueda wants to merge 1 commit from audit-brotli into main
pull from: audit-brotli
merge into: Postulo:main
Conversation 1 Commits 1 Files changed 1 +61 -34
tiagoagueda commented 2026-10-23 13:56:47 +00:00
Owner

pip-audit --strict now reports PYSEC-2026-4322 against brotli 1.2.0, fixed in 1.2.1. The security audit fails on main and on every pull request until the lock moves.

What changed

uv lock --upgrade-package brotli: brotli 1.2.0 to 1.2.1. Nothing else in the lock moves.

Tests

The workflow's own audit command over the new export: no known vulnerabilities.

🤖 Generated with Claude Code

`pip-audit --strict` now reports PYSEC-2026-4322 against brotli 1.2.0, fixed in 1.2.1. The security audit fails on `main` and on every pull request until the lock moves. ## What changed `uv lock --upgrade-package brotli`: brotli 1.2.0 to 1.2.1. Nothing else in the lock moves. ## Tests The workflow's own audit command over the new export: no known vulnerabilities. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move brotli to 1.2.1, past PYSEC-2026-4322
Some checks failed
CI / Unit tests and coverage (Python 3.14) (pull_request) Successful in 12m49s
Details
CI / Checks: lint, migrations, catalogues, settings, built files (pull_request) Successful in 2m30s
Details
CI / Database tests on PostgreSQL (pull_request) Failing after 2m8s
Details
CI / Security audit (pull_request) Successful in 54s
Details
CI / Browser tests (Chromium) (pull_request) Successful in 31m27s
Details
b989544dea
 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tiagoagueda commented 2026-10-23 14:35:21 +00:00
Author
Owner

Superseded by #1040, which carries the same lock change together with the CI fix that makes the PostgreSQL job pass.

Superseded by #1040, which carries the same lock change together with the CI fix that makes the PostgreSQL job pass.
tiagoagueda closed this pull request 2026-10-23 14:35:22 +00:00
Some checks failed
CI / Unit tests and coverage (Python 3.14) (pull_request) Successful in 12m49s
Details
CI / Checks: lint, migrations, catalogues, settings, built files (pull_request) Successful in 2m30s
Details
CI / Database tests on PostgreSQL (pull_request) Failing after 2m8s
Details
CI / Security audit (pull_request) Successful in 54s
Details
CI / Browser tests (Chromium) (pull_request) Successful in 31m27s
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
accessibility
Usable by everyone, including people with disabilities: one of the project's stated missions

  
authentication
Signing in, and proving who you are

  
breaking change
Changes behaviour or data in a way operators must act on

  
bug
Something does not do what it says it does

  
documentation
The wiki, the docs, or the words in the interface

  
enhancement
An improvement or a new capability

  
interface
The shape of the pages: what is where, and how it reads

  
internationalisation
Languages, regions, and the formats and symbols that go with them

  
observability
What an operator can see about a running instance: metrics, logs, health

  
performance
Uses fewer resources, or is more reliable, with no loss of features or accessibility

  
security
Keeping the code and the data secure: one of the project's stated missions

  
tier
1
 Easy: small, self-contained, no prerequisites

  
tier
2
 High-severity security: account access, personal data, the boundaries

  
tier
3
 Foundations: prerequisite work that unblocks other issues

  
tier/4
Later: large features and long-horizon work

No labels
accessibility
authentication
breaking change
bug
documentation
enhancement
interface
internationalisation
observability
performance
security
tier
1
tier
2
tier
3
tier/4
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Postulo/postulo!1039
No description provided.