all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe06:d2
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 19625e5b-70f2-4b45-b174-c2c3cf81db4e
        host_id: 82101243836454d7401d5893feae9e2c5df7cc291646d8a99b33b53b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe06:d2
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.106
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.12
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe06:d2
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job pulpfiction-metalbox explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/pulpfiction/.zuul.yaml@main#2>'
      - '<Job pulpfiction-metalbox explicit: None implied: None source: osism/pulpfiction/.zuul.yaml@main#7>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: d42f3ed6fdf44523a3b49ebc45ceec72
      build_refs:
      - branch: main
        change: '7'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.3` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.3/2.33.0?slim=true)
          |\n\n---\n\n### Requests vulnerable to .netrc credentials leak via malicious
          URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\n\nDue to a URL parsing
          issue, Requests releases prior to 2.32.4 may leak .netrc credentials to
          third parties for specific maliciously-crafted URLs.\n\n##### Workarounds\nFor
          older versions of Requests, use of the .netrc file can be disabled with
          `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://pypi.org/project/requests](https://pypi.org/project/requests)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1872)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()` utility
          function uses a predictable filename when extracting files from zip archives
          into the system temporary directory. If the target file already exists,
          it is reused without validation. A local attacker with write access to the
          temp directory could pre-create a malicious file that would be loaded in
          place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          [CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645) / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nRequests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one. Standard usage of the Requests library is
          not affected by this vulnerability. Only applications that call `extract_zipped_paths()`
          directly are impacted. Starting in version 2.33.0, the library extracts
          files to a non-deterministic location. If developers are unable to upgrade,
          they can set `TMPDIR` in their environment to a directory with restricted
          write access.\n\n#### Severity\n- CVSS Score: 5.5 / 10 (Medium)\n- Vector
          String: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`\n\n#### References\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2275)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)\n\n**Bugfixes**\n\n-
          The SSLContext caching feature originally introduced in 2.32.0 has created\n
          \ a new class of issues in Requests that have had negative impact across
          a number\n  of use cases. The Requests team has decided to revert this feature
          as long term\n  maintenance of it is proving to be unsustainable in its
          current iteration.\n\n**Deprecations**\n\n- Added support for Python 3.14.\n-
          Dropped support for Python 3.8 following its end of support.\n\n### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)\n\n**Security**\n\n-
          CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\n
          \ environment will retrieve credentials for the wrong hostname/machine from
          a\n  netrc file.\n\n**Improvements**\n\n- Numerous documentation improvements\n\n**Deprecations**\n\n-
          Added support for pypy 3.11 for Linux and macOS.\n- Dropped support for
          pypy 3.9 following its end of support.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/pulpfiction).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjY1LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/pulpfiction/pull/7
        commit_id: c87aaf6d112dce928b35a5b078bc6c12748f40de
        patchset: c87aaf6d112dce928b35a5b078bc6c12748f40de
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/pulpfiction
          name: osism/pulpfiction
          short_name: pulpfiction
        src_dir: src/github.com/osism/pulpfiction
        topic: null
      buildset: 404175a27842421298c344f222cc8904
      buildset_refs:
      - branch: main
        change: '7'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.3` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.3/2.33.0?slim=true)
          |\n\n---\n\n### Requests vulnerable to .netrc credentials leak via malicious
          URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\n\nDue to a URL parsing
          issue, Requests releases prior to 2.32.4 may leak .netrc credentials to
          third parties for specific maliciously-crafted URLs.\n\n##### Workarounds\nFor
          older versions of Requests, use of the .netrc file can be disabled with
          `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://pypi.org/project/requests](https://pypi.org/project/requests)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1872)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()` utility
          function uses a predictable filename when extracting files from zip archives
          into the system temporary directory. If the target file already exists,
          it is reused without validation. A local attacker with write access to the
          temp directory could pre-create a malicious file that would be loaded in
          place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          [CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645) / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nRequests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one. Standard usage of the Requests library is
          not affected by this vulnerability. Only applications that call `extract_zipped_paths()`
          directly are impacted. Starting in version 2.33.0, the library extracts
          files to a non-deterministic location. If developers are unable to upgrade,
          they can set `TMPDIR` in their environment to a directory with restricted
          write access.\n\n#### Severity\n- CVSS Score: 5.5 / 10 (Medium)\n- Vector
          String: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`\n\n#### References\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2275)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)\n\n**Bugfixes**\n\n-
          The SSLContext caching feature originally introduced in 2.32.0 has created\n
          \ a new class of issues in Requests that have had negative impact across
          a number\n  of use cases. The Requests team has decided to revert this feature
          as long term\n  maintenance of it is proving to be unsustainable in its
          current iteration.\n\n**Deprecations**\n\n- Added support for Python 3.14.\n-
          Dropped support for Python 3.8 following its end of support.\n\n### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)\n\n**Security**\n\n-
          CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\n
          \ environment will retrieve credentials for the wrong hostname/machine from
          a\n  netrc file.\n\n**Improvements**\n\n- Numerous documentation improvements\n\n**Deprecations**\n\n-
          Added support for pypy 3.11 for Linux and macOS.\n- Dropped support for
          pypy 3.9 following its end of support.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/pulpfiction).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjY1LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/pulpfiction/pull/7
        commit_id: c87aaf6d112dce928b35a5b078bc6c12748f40de
        patchset: c87aaf6d112dce928b35a5b078bc6c12748f40de
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/pulpfiction
          name: osism/pulpfiction
          short_name: pulpfiction
        src_dir: src/github.com/osism/pulpfiction
        topic: null
      change: '7'
      change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis PR
        contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
        | `==2.32.3` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.3/2.33.0?slim=true)
        |\n\n---\n\n### Requests vulnerable to .netrc credentials leak via malicious
        URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081) /
        [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\n\nDue to a URL parsing
        issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third
        parties for specific maliciously-crafted URLs.\n\n##### Workarounds\nFor older
        versions of Requests, use of the .netrc file can be disabled with `trust_env=False`
        on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
        References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
        Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
        [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
        [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
        [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
        [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
        [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
        data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
        function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
        data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
        / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
        / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
        Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
        to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
        URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
        file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
        References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
        Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
        [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
        [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
        [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
        [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
        [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
        / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
        / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
        Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
        to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
        URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
        file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
        References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
        Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
        [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
        [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
        [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
        [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
        [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
        [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
        [https://pypi.org/project/requests](https://pypi.org/project/requests)\n-
        [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1872) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
        function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
        Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()` utility
        function uses a predictable filename when extracting files from zip archives
        into the system temporary directory. If the target file already exists, it
        is reused without validation. A local attacker with write access to the temp
        directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        [CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645) / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
        Details\nRequests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one. Standard usage of the Requests library is not affected
        by this vulnerability. Only applications that call `extract_zipped_paths()`
        directly are impacted. Starting in version 2.33.0, the library extracts files
        to a non-deterministic location. If developers are unable to upgrade, they
        can set `TMPDIR` in their environment to a directory with restricted write
        access.\n\n#### Severity\n- CVSS Score: 5.5 / 10 (Medium)\n- Vector String:
        `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`\n\n#### References\n- [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
        [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2275) and
        the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
        [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
        \U0001F4E3 Requests is adding inline types. If you have a typed code base
        that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
        Give it a try, and report\n  any gaps or feedback you may have in the issue.
        \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
        now extracts\n  contents to a non-deterministic location to prevent malicious
        file\n  replacement. This does not affect default usage of Requests, only\n
        \ applications calling the utility function directly.\n\n**Improvements**\n\n-
        Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
        Fixed an issue where an empty netrc entry could cause\n  malformed authentication
        to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
        Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
        Various typo fixes and doc improvements.\n\n### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)\n\n**Bugfixes**\n\n-
        The SSLContext caching feature originally introduced in 2.32.0 has created\n
        \ a new class of issues in Requests that have had negative impact across a
        number\n  of use cases. The Requests team has decided to revert this feature
        as long term\n  maintenance of it is proving to be unsustainable in its current
        iteration.\n\n**Deprecations**\n\n- Added support for Python 3.14.\n- Dropped
        support for Python 3.8 following its end of support.\n\n### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)\n\n**Security**\n\n-
        CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\n
        \ environment will retrieve credentials for the wrong hostname/machine from
        a\n  netrc file.\n\n**Improvements**\n\n- Numerous documentation improvements\n\n**Deprecations**\n\n-
        Added support for pypy 3.11 for Linux and macOS.\n- Dropped support for pypy
        3.9 following its end of support.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
        Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
        Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
        **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
        checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
        about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
        to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by
        [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/osism/pulpfiction).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjY1LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/pulpfiction/pull/7
      child_jobs: []
      commit_id: c87aaf6d112dce928b35a5b078bc6c12748f40de
      event_id: 697fb0a0-883b-11f1-89f0-58c2920f1991
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/d42f3ed6fdf44523a3b49ebc45ceec72/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/d42f3ed6fdf44523a3b49ebc45ceec72/work/logs
        result_data_file: /var/lib/zuul/builds/d42f3ed6fdf44523a3b49ebc45ceec72/work/results.json
        src_root: /var/lib/zuul/builds/d42f3ed6fdf44523a3b49ebc45ceec72/work/src
        work_root: /var/lib/zuul/builds/d42f3ed6fdf44523a3b49ebc45ceec72/work
      include_vars: []
      items:
      - branch: main
        change: '7'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.3` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.3/2.33.0?slim=true)
          |\n\n---\n\n### Requests vulnerable to .netrc credentials leak via malicious
          URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\n\nDue to a URL parsing
          issue, Requests releases prior to 2.32.4 may leak .netrc credentials to
          third parties for specific maliciously-crafted URLs.\n\n##### Workarounds\nFor
          older versions of Requests, use of the .netrc file can be disabled with
          `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests vulnerable to .netrc credentials leak via malicious URLs\n[CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)
          / [GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)
          / PYSEC-2026-1872\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\n\nDue to a URL parsing issue, Requests releases prior
          to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted
          URLs.\n\n##### Workarounds\nFor older versions of Requests, use of the .netrc
          file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n#####
          References\n[https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\nhttps://seclists.org/fulldisclosure/2025/Jun/2\n\n####
          Severity\n- CVSS Score: 5.3 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2024-47081](https://nvd.nist.gov/vuln/detail/CVE-2024-47081)\n-
          [https://github.com/psf/requests/pull/6965](https://redirect.github.com/psf/requests/pull/6965)\n-
          [https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef](https://redirect.github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)\n-
          [https://seclists.org/fulldisclosure/2025/Jun/2](https://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://seclists.org/fulldisclosure/2025/Jun/2](http://seclists.org/fulldisclosure/2025/Jun/2)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/11](http://www.openwall.com/lists/oss-security/2025/06/03/11)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/03/9](http://www.openwall.com/lists/oss-security/2025/06/03/9)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/1](http://www.openwall.com/lists/oss-security/2025/06/04/1)\n-
          [http://www.openwall.com/lists/oss-security/2025/06/04/6](http://www.openwall.com/lists/oss-security/2025/06/04/6)\n-
          [https://pypi.org/project/requests](https://pypi.org/project/requests)\n-
          [https://github.com/advisories/GHSA-9hjg-9r4m-mvj7](https://redirect.github.com/advisories/GHSA-9hjg-9r4m-mvj7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-1872)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()` utility
          function uses a predictable filename when extracting files from zip archives
          into the system temporary directory. If the target file already exists,
          it is reused without validation. A local attacker with write access to the
          temp directory could pre-create a malicious file that would be loaded in
          place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          [CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645) / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          / PYSEC-2026-2275\n\n<details>\n<summary>More information</summary>\n\n####
          Details\nRequests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one. Standard usage of the Requests library is
          not affected by this vulnerability. Only applications that call `extract_zipped_paths()`
          directly are impacted. Starting in version 2.33.0, the library extracts
          files to a non-deterministic location. If developers are unable to upgrade,
          they can set `TMPDIR` in their environment to a directory with restricted
          write access.\n\n#### Severity\n- CVSS Score: 5.5 / 10 (Medium)\n- Vector
          String: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`\n\n#### References\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2275)
          and the [PyPI Advisory Database](https://redirect.github.com/pypa/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/pypa/advisory-database/blob/main/LICENSE)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)\n\n**Bugfixes**\n\n-
          The SSLContext caching feature originally introduced in 2.32.0 has created\n
          \ a new class of issues in Requests that have had negative impact across
          a number\n  of use cases. The Requests team has decided to revert this feature
          as long term\n  maintenance of it is proving to be unsustainable in its
          current iteration.\n\n**Deprecations**\n\n- Added support for Python 3.14.\n-
          Dropped support for Python 3.8 following its end of support.\n\n### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)\n\n**Security**\n\n-
          CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\n
          \ environment will retrieve credentials for the wrong hostname/machine from
          a\n  netrc file.\n\n**Improvements**\n\n- Numerous documentation improvements\n\n**Deprecations**\n\n-
          Added support for pypy 3.11 for Linux and macOS.\n- Dropped support for
          pypy 3.9 following its end of support.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/pulpfiction).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjY1LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/pulpfiction/pull/7
        commit_id: c87aaf6d112dce928b35a5b078bc6c12748f40de
        patchset: c87aaf6d112dce928b35a5b078bc6c12748f40de
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/pulpfiction
          name: osism/pulpfiction
          short_name: pulpfiction
          src_dir: src/github.com/osism/pulpfiction
        topic: null
      job: pulpfiction-metalbox
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: c87aaf6d112dce928b35a5b078bc6c12748f40de
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: dcb06ea8a3ad422cc9d98b376216617b2daa6a02
          untrusted/project_0/github.com/osism/pulpfiction:
            canonical_name: github.com/osism/pulpfiction
            checkout: main
            commit: ce9a600d10b20dd6321aa0136267ddd935d24a36
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: dcb06ea8a3ad422cc9d98b376216617b2daa6a02
        playbooks:
        - path: untrusted/project_0/github.com/osism/pulpfiction/playbooks/metalbox.yml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/pulpfiction
        name: osism/pulpfiction
        short_name: pulpfiction
        src_dir: src/github.com/osism/pulpfiction
      projects:
        github.com/osism/pulpfiction:
          canonical_hostname: github.com
          canonical_name: github.com/osism/pulpfiction
          checkout: main
          checkout_description: zuul branch
          commit: ce9a600d10b20dd6321aa0136267ddd935d24a36
          name: osism/pulpfiction
          required: false
          short_name: pulpfiction
          src_dir: src/github.com/osism/pulpfiction
      ref: refs/pull/7/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
