all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe1d:4806
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 183bfc1c-6c8c-4a58-af97-96d8c71d9bbc
        host_id: df70f2a3f3d0c26428f22685cfc722ebc48099d99e7332c39e017195
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe1d:4806
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.193
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.9
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe1d:4806
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/netbox-manager/.zuul.yaml@main#39>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 78f8e96f136f4e3998cf828f1c34a0c0
      build_refs:
      - branch: main
        change: '281'
        change_message: "Update dependency setuptools to v83 [SECURITY]\n\nThis PR
          contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `==82.0.1` \u2192 `==83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/82.0.1/83.0.0?slim=true)
          |\n| [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `>=61.0.0` \u2192 `>=83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/61.0.0/83.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/1) for more information.\n\n---\n\n###
          BIT-setuptools-2026-59890 / [CVE-2026-59890](https://nvd.nist.gov/vuln/detail/CVE-2026-59890)
          / [GHSA-h35f-9h28-mq5c](https://redirect.github.com/advisories/GHSA-h35f-9h28-mq5c)
          / PYSEC-2026-3447\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied
          MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives
          by matching compiled glob patterns against on-disk file names without Unicode
          normalization, so on macOS APFS or HFS+ an NFD file name could bypass an
          NFC exclusion rule and be packed into a source distribution. This issue
          is fixed in version 83.0.0.\n\n#### Severity\n- CVSS Score: 6.1 / 10 (Medium)\n-
          Vector String: `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N`\n\n#### References\n-
          [https://github.com/pypa/setuptools/releases/tag/v83.0.0](https://redirect.github.com/pypa/setuptools/releases/tag/v83.0.0)\n-
          [https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f](https://redirect.github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f)\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-3447)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)\nBIT-setuptools-2022-40897
          / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897) / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA)'s setuptools is a library designed
          to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier
          could allow remote attackers to cause a denial of service by fetching malicious
          HTML from a PyPI package or custom PackageIndex page due to a vulnerable
          Regular Expression in `package_index`. This has been patched in version
          65.5.1.\n\n#### Severity\n- CVSS Score: 8.7 / 10 (High)\n- Vector String:
          `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)\n-
          [https://github.com/pypa/setuptools/issues/3659](https://redirect.github.com/pypa/setuptools/issues/3659)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://setuptools.pypa.io/en/latest](https://setuptools.pypa.io/en/latest)\n-
          [https://security.netapp.com/advisory/ntap-20240621-0006](https://security.netapp.com/advisory/ntap-20240621-0006)\n-
          [https://security.netapp.com/advisory/ntap-20230214-0001](https://security.netapp.com/advisory/ntap-20230214-0001)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495](https://pyup.io/vulnerabilities/CVE-2022-40897/52495)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r9hx-vwmv-q579)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2022-40897 / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)
          / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA) setuptools before 65.5.1 allows
          remote attackers to cause a denial of service via HTML in a crafted package
          or custom PackageIndex page. There is a Regular Expression Denial of Service
          (ReDoS) in package_index.py.\n\n#### Severity\nUnknown\n\n#### References\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495/](https://pyup.io/vulnerabilities/CVE-2022-40897/52495/)\n-
          [https://github.com/advisories/GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2022-43012)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cx63-2mw6-8hw5)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://pypi.org/project/setuptools](https://pypi.org/project/setuptools)\n-
          [https://github.com/advisories/GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1918)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools has a path traversal vulnerability in PackageIndex.download that
          leads to Arbitrary File Write\nBIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Summary \nA path traversal vulnerability in `PackageIndex`
          was fixed in setuptools version 78.1.1\n\n##### Details\n```\n    def _download_url(self,
          url, tmpdir):\n        # Determine download filename\n        #\n        name,
          _fragment = egg_info_for_url(url)\n        if name:\n            while '..'
          in name:\n                name = name.replace('..', '.').replace('\\\\',
          '_')\n        else:\n            name = \"__downloaded__\"  # default if
          URL has no path contents\n\n        if name.endswith('.[egg.zip](http://egg.zip/)'):\n
          \           name = name[:-4]  # strip the extra .zip before download\n\n
          -->       filename = os.path.join(tmpdir, name)\n```\n\nHere: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88\n\n`os.path.join()`
          discards the first argument `tmpdir` if the second begins with a slash or
          drive letter.\n`name` is derived from a URL without sufficient sanitization.
          While there is some attempt to sanitize by replacing instances of '..' with
          '.', it is insufficient.\n\n##### Risk Assessment\nAs easy_install and package_index
          are deprecated, the exploitation surface is reduced.\nHowever, it seems
          this could be exploited in a similar fashion like https://github.com/advisories/GHSA-r9hx-vwmv-q579,
          and as described by POC 4 in https://github.com/advisories/GHSA-cx63-2mw6-8hw5
          report: via malicious URLs present on the pages of a package index.\n\n#####
          Impact\nAn attacker would be allowed to write files to arbitrary locations
          on the filesystem with the permissions of the process running the Python
          code, which could escalate to RCE depending on the context.\n\n##### References\nhttps://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5\n[https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n\n####
          Severity\n- CVSS Score: 7.7 / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`\n\n####
          References\n- [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-5rjg-fvgr-3xxf)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. A path traversal vulnerability in
          `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker
          would be allowed to write files to arbitrary locations on the filesystem
          with the permissions of the process running the Python code, which could
          escalate to remote code execution depending on the context. Version 78.1.1
          fixes the issue.\n\n#### Severity\n- CVSS Score: 8.8 / 10 (High)\n- Vector
          String: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`\n\n#### References\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2025-49) and
          the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>pypa/setuptools (setuptools)</summary>\n\n###
          [`v83.0.0`](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n[Compare
          Source](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about these updates again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/netbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/netbox-manager/pull/281
        commit_id: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        patchset: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/netbox-manager
          name: osism/netbox-manager
          short_name: netbox-manager
        src_dir: src/github.com/osism/netbox-manager
        topic: null
      buildset: 26f11b2a960f44a09e1c9ccdc6c4ead3
      buildset_refs:
      - branch: main
        change: '281'
        change_message: "Update dependency setuptools to v83 [SECURITY]\n\nThis PR
          contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `==82.0.1` \u2192 `==83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/82.0.1/83.0.0?slim=true)
          |\n| [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `>=61.0.0` \u2192 `>=83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/61.0.0/83.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/1) for more information.\n\n---\n\n###
          BIT-setuptools-2026-59890 / [CVE-2026-59890](https://nvd.nist.gov/vuln/detail/CVE-2026-59890)
          / [GHSA-h35f-9h28-mq5c](https://redirect.github.com/advisories/GHSA-h35f-9h28-mq5c)
          / PYSEC-2026-3447\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied
          MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives
          by matching compiled glob patterns against on-disk file names without Unicode
          normalization, so on macOS APFS or HFS+ an NFD file name could bypass an
          NFC exclusion rule and be packed into a source distribution. This issue
          is fixed in version 83.0.0.\n\n#### Severity\n- CVSS Score: 6.1 / 10 (Medium)\n-
          Vector String: `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N`\n\n#### References\n-
          [https://github.com/pypa/setuptools/releases/tag/v83.0.0](https://redirect.github.com/pypa/setuptools/releases/tag/v83.0.0)\n-
          [https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f](https://redirect.github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f)\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-3447)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)\nBIT-setuptools-2022-40897
          / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897) / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA)'s setuptools is a library designed
          to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier
          could allow remote attackers to cause a denial of service by fetching malicious
          HTML from a PyPI package or custom PackageIndex page due to a vulnerable
          Regular Expression in `package_index`. This has been patched in version
          65.5.1.\n\n#### Severity\n- CVSS Score: 8.7 / 10 (High)\n- Vector String:
          `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)\n-
          [https://github.com/pypa/setuptools/issues/3659](https://redirect.github.com/pypa/setuptools/issues/3659)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://setuptools.pypa.io/en/latest](https://setuptools.pypa.io/en/latest)\n-
          [https://security.netapp.com/advisory/ntap-20240621-0006](https://security.netapp.com/advisory/ntap-20240621-0006)\n-
          [https://security.netapp.com/advisory/ntap-20230214-0001](https://security.netapp.com/advisory/ntap-20230214-0001)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495](https://pyup.io/vulnerabilities/CVE-2022-40897/52495)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r9hx-vwmv-q579)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2022-40897 / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)
          / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA) setuptools before 65.5.1 allows
          remote attackers to cause a denial of service via HTML in a crafted package
          or custom PackageIndex page. There is a Regular Expression Denial of Service
          (ReDoS) in package_index.py.\n\n#### Severity\nUnknown\n\n#### References\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495/](https://pyup.io/vulnerabilities/CVE-2022-40897/52495/)\n-
          [https://github.com/advisories/GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2022-43012)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cx63-2mw6-8hw5)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://pypi.org/project/setuptools](https://pypi.org/project/setuptools)\n-
          [https://github.com/advisories/GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1918)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools has a path traversal vulnerability in PackageIndex.download that
          leads to Arbitrary File Write\nBIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Summary \nA path traversal vulnerability in `PackageIndex`
          was fixed in setuptools version 78.1.1\n\n##### Details\n```\n    def _download_url(self,
          url, tmpdir):\n        # Determine download filename\n        #\n        name,
          _fragment = egg_info_for_url(url)\n        if name:\n            while '..'
          in name:\n                name = name.replace('..', '.').replace('\\\\',
          '_')\n        else:\n            name = \"__downloaded__\"  # default if
          URL has no path contents\n\n        if name.endswith('.[egg.zip](http://egg.zip/)'):\n
          \           name = name[:-4]  # strip the extra .zip before download\n\n
          -->       filename = os.path.join(tmpdir, name)\n```\n\nHere: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88\n\n`os.path.join()`
          discards the first argument `tmpdir` if the second begins with a slash or
          drive letter.\n`name` is derived from a URL without sufficient sanitization.
          While there is some attempt to sanitize by replacing instances of '..' with
          '.', it is insufficient.\n\n##### Risk Assessment\nAs easy_install and package_index
          are deprecated, the exploitation surface is reduced.\nHowever, it seems
          this could be exploited in a similar fashion like https://github.com/advisories/GHSA-r9hx-vwmv-q579,
          and as described by POC 4 in https://github.com/advisories/GHSA-cx63-2mw6-8hw5
          report: via malicious URLs present on the pages of a package index.\n\n#####
          Impact\nAn attacker would be allowed to write files to arbitrary locations
          on the filesystem with the permissions of the process running the Python
          code, which could escalate to RCE depending on the context.\n\n##### References\nhttps://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5\n[https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n\n####
          Severity\n- CVSS Score: 7.7 / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`\n\n####
          References\n- [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-5rjg-fvgr-3xxf)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. A path traversal vulnerability in
          `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker
          would be allowed to write files to arbitrary locations on the filesystem
          with the permissions of the process running the Python code, which could
          escalate to remote code execution depending on the context. Version 78.1.1
          fixes the issue.\n\n#### Severity\n- CVSS Score: 8.8 / 10 (High)\n- Vector
          String: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`\n\n#### References\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2025-49) and
          the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>pypa/setuptools (setuptools)</summary>\n\n###
          [`v83.0.0`](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n[Compare
          Source](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about these updates again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/netbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/netbox-manager/pull/281
        commit_id: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        patchset: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/netbox-manager
          name: osism/netbox-manager
          short_name: netbox-manager
        src_dir: src/github.com/osism/netbox-manager
        topic: null
      change: '281'
      change_message: "Update dependency setuptools to v83 [SECURITY]\n\nThis PR contains
        the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
        | `==82.0.1` \u2192 `==83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/82.0.1/83.0.0?slim=true)
        |\n| [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
        | `>=61.0.0` \u2192 `>=83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/61.0.0/83.0.0?slim=true)
        |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
        the [Dependency Dashboard](../issues/1) for more information.\n\n---\n\n###
        BIT-setuptools-2026-59890 / [CVE-2026-59890](https://nvd.nist.gov/vuln/detail/CVE-2026-59890)
        / [GHSA-h35f-9h28-mq5c](https://redirect.github.com/advisories/GHSA-h35f-9h28-mq5c)
        / PYSEC-2026-3447\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nsetuptools is a package that allows users to download, build, install,
        upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied
        MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives
        by matching compiled glob patterns against on-disk file names without Unicode
        normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC
        exclusion rule and be packed into a source distribution. This issue is fixed
        in version 83.0.0.\n\n#### Severity\n- CVSS Score: 6.1 / 10 (Medium)\n- Vector
        String: `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N`\n\n#### References\n-
        [https://github.com/pypa/setuptools/releases/tag/v83.0.0](https://redirect.github.com/pypa/setuptools/releases/tag/v83.0.0)\n-
        [https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f](https://redirect.github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f)\n-
        [https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-3447) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)\nBIT-setuptools-2022-40897
        / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897) / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
        / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nPython Packaging Authority (PyPA)'s setuptools is a library designed
        to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier
        could allow remote attackers to cause a denial of service by fetching malicious
        HTML from a PyPI package or custom PackageIndex page due to a vulnerable Regular
        Expression in `package_index`. This has been patched in version 65.5.1.\n\n####
        Severity\n- CVSS Score: 8.7 / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N`\n\n####
        References\n- [https://nvd.nist.gov/vuln/detail/CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)\n-
        [https://github.com/pypa/setuptools/issues/3659](https://redirect.github.com/pypa/setuptools/issues/3659)\n-
        [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
        [https://setuptools.pypa.io/en/latest](https://setuptools.pypa.io/en/latest)\n-
        [https://security.netapp.com/advisory/ntap-20240621-0006](https://security.netapp.com/advisory/ntap-20240621-0006)\n-
        [https://security.netapp.com/advisory/ntap-20230214-0001](https://security.netapp.com/advisory/ntap-20230214-0001)\n-
        [https://pyup.io/vulnerabilities/CVE-2022-40897/52495](https://pyup.io/vulnerabilities/CVE-2022-40897/52495)\n-
        [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages)\n-
        [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
        [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
        [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
        [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
        [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
        [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
        [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
        [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
        [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r9hx-vwmv-q579)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        BIT-setuptools-2022-40897 / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)
        / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
        / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nPython Packaging Authority (PyPA) setuptools before 65.5.1 allows
        remote attackers to cause a denial of service via HTML in a crafted package
        or custom PackageIndex page. There is a Regular Expression Denial of Service
        (ReDoS) in package_index.py.\n\n#### Severity\nUnknown\n\n#### References\n-
        [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
        [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/)\n-
        [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
        [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
        [https://pyup.io/vulnerabilities/CVE-2022-40897/52495/](https://pyup.io/vulnerabilities/CVE-2022-40897/52495/)\n-
        [https://github.com/advisories/GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2022-43012)
        and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
        / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
        / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nA vulnerability in the `package_index` module of pypa/setuptools
        versions up to 69.1.1 allows for remote code execution via its download functions.
        These functions, which are used to download packages from URLs provided by
        users or retrieved from package index servers, are susceptible to code injection.
        If these functions are exposed to user-controlled inputs, such as package
        URLs, they can execute arbitrary commands on the system. The issue is fixed
        in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5 / 10 (High)\n- Vector
        String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
        References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
        [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
        [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
        [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
        [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
        [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cx63-2mw6-8hw5)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
        / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
        / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nA vulnerability in the `package_index` module of pypa/setuptools
        versions up to 69.1.1 allows for remote code execution via its download functions.
        These functions, which are used to download packages from URLs provided by
        users or retrieved from package index servers, are susceptible to code injection.
        If these functions are exposed to user-controlled inputs, such as package
        URLs, they can execute arbitrary commands on the system. The issue is fixed
        in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5 / 10 (High)\n- Vector
        String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
        References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
        [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
        [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
        [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
        [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
        [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
        [https://pypi.org/project/setuptools](https://pypi.org/project/setuptools)\n-
        [https://github.com/advisories/GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1918) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        setuptools has a path traversal vulnerability in PackageIndex.download that
        leads to Arbitrary File Write\nBIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
        / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
        / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
        Details\n##### Summary \nA path traversal vulnerability in `PackageIndex`
        was fixed in setuptools version 78.1.1\n\n##### Details\n```\n    def _download_url(self,
        url, tmpdir):\n        # Determine download filename\n        #\n        name,
        _fragment = egg_info_for_url(url)\n        if name:\n            while '..'
        in name:\n                name = name.replace('..', '.').replace('\\\\', '_')\n
        \       else:\n            name = \"__downloaded__\"  # default if URL has
        no path contents\n\n        if name.endswith('.[egg.zip](http://egg.zip/)'):\n
        \           name = name[:-4]  # strip the extra .zip before download\n\n -->
        \      filename = os.path.join(tmpdir, name)\n```\n\nHere: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88\n\n`os.path.join()`
        discards the first argument `tmpdir` if the second begins with a slash or
        drive letter.\n`name` is derived from a URL without sufficient sanitization.
        While there is some attempt to sanitize by replacing instances of '..' with
        '.', it is insufficient.\n\n##### Risk Assessment\nAs easy_install and package_index
        are deprecated, the exploitation surface is reduced.\nHowever, it seems this
        could be exploited in a similar fashion like https://github.com/advisories/GHSA-r9hx-vwmv-q579,
        and as described by POC 4 in https://github.com/advisories/GHSA-cx63-2mw6-8hw5
        report: via malicious URLs present on the pages of a package index.\n\n#####
        Impact\nAn attacker would be allowed to write files to arbitrary locations
        on the filesystem with the permissions of the process running the Python code,
        which could escalate to RCE depending on the context.\n\n##### References\nhttps://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5\n[https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n\n####
        Severity\n- CVSS Score: 7.7 / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`\n\n####
        References\n- [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)\n-
        [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
        [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
        [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml)\n-
        [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
        [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n-
        [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-5rjg-fvgr-3xxf)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        BIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
        / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
        / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nsetuptools is a package that allows users to download, build, install,
        upgrade, and uninstall Python packages. A path traversal vulnerability in
        `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker
        would be allowed to write files to arbitrary locations on the filesystem with
        the permissions of the process running the Python code, which could escalate
        to remote code execution depending on the context. Version 78.1.1 fixes the
        issue.\n\n#### Severity\n- CVSS Score: 8.8 / 10 (High)\n- Vector String: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`\n\n####
        References\n- [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
        [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n-
        [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
        [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
        [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2025-49) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>pypa/setuptools (setuptools)</summary>\n\n###
        [`v83.0.0`](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n[Compare
        Source](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about these updates again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/netbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/netbox-manager/pull/281
      child_jobs: []
      commit_id: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
      event_id: ffbac890-8366-11f1-8a96-1ccb78c12e27
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/78f8e96f136f4e3998cf828f1c34a0c0/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/78f8e96f136f4e3998cf828f1c34a0c0/work/logs
        result_data_file: /var/lib/zuul/builds/78f8e96f136f4e3998cf828f1c34a0c0/work/results.json
        src_root: /var/lib/zuul/builds/78f8e96f136f4e3998cf828f1c34a0c0/work/src
        work_root: /var/lib/zuul/builds/78f8e96f136f4e3998cf828f1c34a0c0/work
      include_vars: []
      items:
      - branch: main
        change: '281'
        change_message: "Update dependency setuptools to v83 [SECURITY]\n\nThis PR
          contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `==82.0.1` \u2192 `==83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/82.0.1/83.0.0?slim=true)
          |\n| [setuptools](https://redirect.github.com/pypa/setuptools) ([changelog](https://setuptools.pypa.io/en/stable/history.html))
          | `>=61.0.0` \u2192 `>=83.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/setuptools/83.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/setuptools/61.0.0/83.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/1) for more information.\n\n---\n\n###
          BIT-setuptools-2026-59890 / [CVE-2026-59890](https://nvd.nist.gov/vuln/detail/CVE-2026-59890)
          / [GHSA-h35f-9h28-mq5c](https://redirect.github.com/advisories/GHSA-h35f-9h28-mq5c)
          / PYSEC-2026-3447\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied
          MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives
          by matching compiled glob patterns against on-disk file names without Unicode
          normalization, so on macOS APFS or HFS+ an NFD file name could bypass an
          NFC exclusion rule and be packed into a source distribution. This issue
          is fixed in version 83.0.0.\n\n#### Severity\n- CVSS Score: 6.1 / 10 (Medium)\n-
          Vector String: `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N`\n\n#### References\n-
          [https://github.com/pypa/setuptools/releases/tag/v83.0.0](https://redirect.github.com/pypa/setuptools/releases/tag/v83.0.0)\n-
          [https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f](https://redirect.github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f)\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-3447)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)\nBIT-setuptools-2022-40897
          / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897) / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA)'s setuptools is a library designed
          to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier
          could allow remote attackers to cause a denial of service by fetching malicious
          HTML from a PyPI package or custom PackageIndex page due to a vulnerable
          Regular Expression in `package_index`. This has been patched in version
          65.5.1.\n\n#### Severity\n- CVSS Score: 8.7 / 10 (High)\n- Vector String:
          `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)\n-
          [https://github.com/pypa/setuptools/issues/3659](https://redirect.github.com/pypa/setuptools/issues/3659)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://setuptools.pypa.io/en/latest](https://setuptools.pypa.io/en/latest)\n-
          [https://security.netapp.com/advisory/ntap-20240621-0006](https://security.netapp.com/advisory/ntap-20240621-0006)\n-
          [https://security.netapp.com/advisory/ntap-20230214-0001](https://security.netapp.com/advisory/ntap-20230214-0001)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495](https://pyup.io/vulnerabilities/CVE-2022-40897/52495)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H)\n-
          [https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-r9hx-vwmv-q579)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2022-40897 / [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)
          / [GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)
          / PYSEC-2022-43012\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nPython Packaging Authority (PyPA) setuptools before 65.5.1 allows
          remote attackers to cause a denial of service via HTML in a crafted package
          or custom PackageIndex page. There is a Regular Expression Denial of Service
          (ReDoS) in package_index.py.\n\n#### Severity\nUnknown\n\n#### References\n-
          [https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200](https://redirect.github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200)\n-
          [https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/](https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/)\n-
          [https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1](https://redirect.github.com/pypa/setuptools/compare/v65.5.0...v65.5.1)\n-
          [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be](https://redirect.github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be)\n-
          [https://pyup.io/vulnerabilities/CVE-2022-40897/52495/](https://pyup.io/vulnerabilities/CVE-2022-40897/52495/)\n-
          [https://github.com/advisories/GHSA-r9hx-vwmv-q579](https://redirect.github.com/advisories/GHSA-r9hx-vwmv-q579)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2022-43012)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cx63-2mw6-8hw5)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          setuptools vulnerable to Command Injection via package URL\nBIT-setuptools-2024-6345
          / [CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345) / [GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)
          / PYSEC-2026-1918\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nA vulnerability in the `package_index` module of pypa/setuptools
          versions up to 69.1.1 allows for remote code execution via its download
          functions. These functions, which are used to download packages from URLs
          provided by users or retrieved from package index servers, are susceptible
          to code injection. If these functions are exposed to user-controlled inputs,
          such as package URLs, they can execute arbitrary commands on the system.
          The issue is fixed in version 70.0.\n\n#### Severity\n- CVSS Score: 7.5
          / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`\n\n####
          References\n- [https://nvd.nist.gov/vuln/detail/CVE-2024-6345](https://nvd.nist.gov/vuln/detail/CVE-2024-6345)\n-
          [https://github.com/pypa/setuptools/pull/4332](https://redirect.github.com/pypa/setuptools/pull/4332)\n-
          [https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0](https://redirect.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5](https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)\n-
          [https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html](https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html)\n-
          [https://pypi.org/project/setuptools](https://pypi.org/project/setuptools)\n-
          [https://github.com/advisories/GHSA-cx63-2mw6-8hw5](https://redirect.github.com/advisories/GHSA-cx63-2mw6-8hw5)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1918)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          setuptools has a path traversal vulnerability in PackageIndex.download that
          leads to Arbitrary File Write\nBIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Summary \nA path traversal vulnerability in `PackageIndex`
          was fixed in setuptools version 78.1.1\n\n##### Details\n```\n    def _download_url(self,
          url, tmpdir):\n        # Determine download filename\n        #\n        name,
          _fragment = egg_info_for_url(url)\n        if name:\n            while '..'
          in name:\n                name = name.replace('..', '.').replace('\\\\',
          '_')\n        else:\n            name = \"__downloaded__\"  # default if
          URL has no path contents\n\n        if name.endswith('.[egg.zip](http://egg.zip/)'):\n
          \           name = name[:-4]  # strip the extra .zip before download\n\n
          -->       filename = os.path.join(tmpdir, name)\n```\n\nHere: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88\n\n`os.path.join()`
          discards the first argument `tmpdir` if the second begins with a slash or
          drive letter.\n`name` is derived from a URL without sufficient sanitization.
          While there is some attempt to sanitize by replacing instances of '..' with
          '.', it is insufficient.\n\n##### Risk Assessment\nAs easy_install and package_index
          are deprecated, the exploitation surface is reduced.\nHowever, it seems
          this could be exploited in a similar fashion like https://github.com/advisories/GHSA-r9hx-vwmv-q579,
          and as described by POC 4 in https://github.com/advisories/GHSA-cx63-2mw6-8hw5
          report: via malicious URLs present on the pages of a package index.\n\n#####
          Impact\nAn attacker would be allowed to write files to arbitrary locations
          on the filesystem with the permissions of the process running the Python
          code, which could escalate to RCE depending on the context.\n\n##### References\nhttps://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5\n[https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n\n####
          Severity\n- CVSS Score: 7.7 / 10 (High)\n- Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`\n\n####
          References\n- [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml](https://redirect.github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml)\n-
          [https://github.com/pypa/setuptools](https://redirect.github.com/pypa/setuptools)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-5rjg-fvgr-3xxf)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          BIT-setuptools-2025-47273 / [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273)
          / [GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/advisories/GHSA-5rjg-fvgr-3xxf)
          / PYSEC-2025-49\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nsetuptools is a package that allows users to download, build, install,
          upgrade, and uninstall Python packages. A path traversal vulnerability in
          `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker
          would be allowed to write files to arbitrary locations on the filesystem
          with the permissions of the process running the Python code, which could
          escalate to remote code execution depending on the context. Version 78.1.1
          fixes the issue.\n\n#### Severity\n- CVSS Score: 8.8 / 10 (High)\n- Vector
          String: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`\n\n#### References\n-
          [https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf](https://redirect.github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf)\n-
          [https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html)\n-
          [https://github.com/pypa/setuptools/issues/4946](https://redirect.github.com/pypa/setuptools/issues/4946)\n-
          [https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b](https://redirect.github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b)\n-
          [https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88](https://redirect.github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2025-49) and
          the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>pypa/setuptools (setuptools)</summary>\n\n###
          [`v83.0.0`](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n[Compare
          Source](https://redirect.github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about these updates again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/netbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/netbox-manager/pull/281
        commit_id: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        patchset: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/netbox-manager
          name: osism/netbox-manager
          short_name: netbox-manager
          src_dir: src/github.com/osism/netbox-manager
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 00bcf5ecc52a77412c6b20ba9ca60da2d5a9b2fa
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/netbox-manager
        name: osism/netbox-manager
        short_name: netbox-manager
        src_dir: src/github.com/osism/netbox-manager
      projects:
        github.com/osism/netbox-manager:
          canonical_hostname: github.com
          canonical_name: github.com/osism/netbox-manager
          checkout: main
          checkout_description: zuul branch
          commit: 989cf6f95fe80f5e26be48e577122c8e3c0bc6ae
          name: osism/netbox-manager
          required: false
          short_name: netbox-manager
          src_dir: src/github.com/osism/netbox-manager
      ref: refs/pull/281/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
