Skip to content

update python versions and update package version to fix CVE's - #127

Merged
nkrylov-levelblue merged 1 commit into
alertlogic:masterfrom
imranalisyed506:im-python-updates
Oct 28, 2026
Merged

update python versions and update package version to fix CVE's#127
nkrylov-levelblue merged 1 commit into
alertlogic:masterfrom
imranalisyed506:im-python-updates

Conversation

@imranalisyed506

@imranalisyed506 imranalisyed506 commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Problem:

  • The SDK still targeted Python 3.7–3.10 and pinned outdated packages
  • (PyYAML 5.4.1, m2r2 0.3.2 / mistune 0.8.x, old requests/urllib3,
  • Updated deprecated GitHub Actions.
  • alertlogic-sdk-definitions now also requires Python >=3.11 and urllib3>=2.
  • updated other dependencies to latest version

Solution:

  • Declare support for Python 3.11–3.15 across packaging, CI, tox, docs and README. Raise dependency floors to current PyPI releases
  • Keep jsonschema==3.2.0 for definitions compatibility, and cap mistune>=3.3.4,<3.4 for m2r2.
  • Update Actions to checkout/setup-pythonv7
  • Replace pkg_resources and the deprecated urllib3 Retry import,
  • Switch setuptools-scm to version_file.

@nkrylov-levelblue
nkrylov-levelblue merged commit 48cec2e into alertlogic:master Oct 28, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@pete-twibill-lb pete-twibill-lb pete-twibill-lb approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@imranalisyed506 @pete-twibill-lb @nkrylov-levelblue