[securedrop-proxy] Bump requests to 2.31.0
zenmonkeykstop opened this issue · 1 comments
zenmonkeykstop commented
A requests bug was found: GHSA-j8r2-6x86-q33q
We're not directly affected AFAICT but bumping the version is no harm.
Diff review done in freedomofpress/securedrop#6820
rocodes commented
(Note that freedomofpress/securedrop-builder#454 will need review as well before #119 will pass CI; commenting here for visibility since we're tracking issues not PRs in the dev board)