Skip to content

fix: Update the oauthlib version to fix vulnerability - #7113

Open
shuchu wants to merge 3 commits into
feast-dev:masterfrom
shuchu:fix/issue-7111
Open

shuchu wants to merge 3 commits into
feast-dev:masterfrom
shuchu:fix/issue-7111

Conversation

@shuchu

@shuchu shuchu commented Nov 7, 2026

Copy link
Copy Markdown
Collaborator

What this PR does / why we need it:

Update the oauthlib version from 4.0.0 to 4.0.1 to solve security vunlnerability.

Which issue(s) this PR fixes:

Fix #7111

Checks

  • I've made sure the tests are passing.
  • My commits are signed off (git commit -s)
  • My PR title follows conventional commits format

Testing Strategy

  • Unit tests
  • Integration tests
  • Manual tests
  • Testing is not required for this change

Misc

Signed-off-by: SHUCHU HAN <shuchu@SHUCHUs-MacBook-Air.local>
@shuchu
shuchu requested a review from a team as a code owner November 7, 2026 00:02
@shuchu
shuchu requested a balanced review from Copilot November 7, 2026 00:03

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Copilot's per-file or total diff limits were exceeded. Try reducing the changed content or splitting the changes into smaller pull requests, then request a review from Copilot again.

@shuchu shuchu changed the title fix: Update the oauthlib version to fix vulnerability. fix: Update the oauthlib version to fix vulnerability Nov 7, 2026
@codecov-commenter

codecov-commenter commented Nov 7, 2026 •

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.32%. Comparing base (bbaca76) to head (45349a9).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #7113   +/-   ##
=======================================
  Coverage   51.32%   51.32%           
=======================================
  Files         458      458           
  Lines       57441    57441           
  Branches     8421     8421           
=======================================
  Hits        29482    29482           
  Misses      25950    25950           
  Partials     2009     2009           
Flag Coverage Δ *Carryforward flag
go-feature-server 30.58% <ø> (ø)
python-unit 52.79% <ø> (ø) Carriedforward from 00ca831

*This pull request uses carry forward flags. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bbaca76...45349a9. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Signed-off-by: Shuchu Han <shuchu.han@gmail.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: bump oauthlib from 4.0.0 to 4.0.1 in /sdk/python/requirements

3 participants