all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fee8:a7f2
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 3b77538c-f130-4d0f-8a30-aad2bb682b2f
        host_id: 7f2607eceb24f4583c6f9496c53c64b51afe50de5eacda4379b21c42
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fee8:a7f2
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.108
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.181
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fee8:a7f2
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job ansible-lint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#7>'
      - '<Job ansible-lint explicit: None implied: None source: osism/container-image-kolla-ansible/.zuul.yaml@main#163>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 738c1eb6d7954ac4a59b6968c37d0823
      build_refs:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 828e6c948278b91473269433b013f53f8bdd7c27
        patchset: 828e6c948278b91473269433b013f53f8bdd7c27
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      buildset: 6b7884b363af4f399442ad825712a660
      buildset_refs:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 828e6c948278b91473269433b013f53f8bdd7c27
        patchset: 828e6c948278b91473269433b013f53f8bdd7c27
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      change: '882'
      change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis PR
        contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
        | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
        |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
        utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
        data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
        [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
        \U0001F4E3 Requests is adding inline types. If you have a typed code base
        that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
        Give it a try, and report\n  any gaps or feedback you may have in the issue.
        \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
        now extracts\n  contents to a non-deterministic location to prevent malicious
        file\n  replacement. This does not affect default usage of Requests, only\n
        \ applications calling the utility function directly.\n\n**Improvements**\n\n-
        Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
        Fixed an issue where an empty netrc entry could cause\n  malformed authentication
        to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
        Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
        Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At any
        time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config.
        Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
        Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
        **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
      child_jobs: []
      commit_id: 828e6c948278b91473269433b013f53f8bdd7c27
      event_id: a4637d60-592d-11f1-9caa-4de4f087bf14
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/738c1eb6d7954ac4a59b6968c37d0823/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/738c1eb6d7954ac4a59b6968c37d0823/work/logs
        result_data_file: /var/lib/zuul/builds/738c1eb6d7954ac4a59b6968c37d0823/work/results.json
        src_root: /var/lib/zuul/builds/738c1eb6d7954ac4a59b6968c37d0823/work/src
        work_root: /var/lib/zuul/builds/738c1eb6d7954ac4a59b6968c37d0823/work
      include_vars: []
      items:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 828e6c948278b91473269433b013f53f8bdd7c27
        patchset: 828e6c948278b91473269433b013f53f8bdd7c27
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      job: ansible-lint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 828e6c948278b91473269433b013f53f8bdd7c27
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 019f0261a526db7d8989ff1abefc2299a8c0ffbc
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 019f0261a526db7d8989ff1abefc2299a8c0ffbc
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/ansible-lint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-kolla-ansible
        name: osism/container-image-kolla-ansible
        short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
      projects:
        github.com/osism/container-image-kolla-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 73f97aff81cf44808b14322ab5c4f5bf51a47d20
          name: osism/container-image-kolla-ansible
          required: false
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
      ref: refs/pull/882/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
