Skip to content

Bump Python 3.10+ dependencies to resolve known vulnerabilities (v3.3.4) #250

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Keith-wright merged 5 commits into from
Mar 19, 2026
Merged

Bump Python 3.10+ dependencies to resolve known vulnerabilities (v3.3.4) #250

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
8a59936
Bump Python 3.10+ dependencies to resolve known vulnerabilities (v3.3.4)
git-wright Mar 17, 2026
cfb4e2e
ci: update test workflow to ubuntu-latest, Python 3.10-3.12, modern t…
git-wright Mar 18, 2026
0ba7f59
ci: fix unittest discover to use top-level-directory for package imports
git-wright Mar 18, 2026
7d3183f
fix: replace deprecated asyncio.coroutine with async/await in aiohttp…
git-wright Mar 18, 2026
4b6101f
Update deprecated GitHub Actions in workflows
git-wright Mar 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,16 @@
# Changelog

## 3.3.4

- [FIXED] Bump Python 3.10+ dependencies to resolve known vulnerabilities: cryptography (41.0.0 → 46.0.5), requests (2.27.1 → 2.32.4), urllib3 (1.26.9 → 2.6.3), aiohttp (3.8.1 → 3.13.3), pynacl (1.5.0 → 1.6.2)

## 3.3.2

- [CHANGED] Utilities no longer escape non ascii characters.
- [CHANGED] Utilities no longer escape non ascii characters.

## 3.3.1

- [ADDED] Allow Client to accept float as a timeout
- [ADDED] Allow Client to accept float as a timeout
- [CHANGED] the maximum event payload size permitted by this library has been increased. This change affects the library only: the Channels API still maintains a 10kb size limit and will return an error if the payload is too large.

## 3.3.0
Expand Down
2 changes: 1 addition & 1 deletion pusher/version.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
# Don't change the format of this line: the version is extracted by ../setup.py
VERSION = '3.3.3'
VERSION = '3.3.4'
35 changes: 18 additions & 17 deletions requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,30 +16,31 @@ pyOpenSSL==19.0.0; python_version < '3.10'
requests==2.22.0; python_version < '3.10'
six==1.12.0; python_version < '3.10'
urllib3==1.25.9; python_version < '3.10'
aiohttp==3.5.4; python_version >= '3.5' and python_version < '3.10'
aiohttp==3.8.1; python_version >= '3.10'
aiosignal==1.2.0; python_version >= '3.10'
aiohappyeyeballs==2.6.1; python_version >= '3.10'
aiohttp==3.13.3; python_version >= '3.10'
aiosignal==1.4.0; python_version >= '3.10'
async-timeout==3.0.1; python_version >= '3.5' and python_version < '3.10'
async-timeout==4.0.2; python_version >= '3.10'
async-timeout==5.0.1; python_version >= '3.10'
attrs==19.1.0; python_version >= '3.5' and python_version < '3.10'
attrs==21.4.0; python_version >= '3.10'
certifi==2021.10.8; python_version >= '3.10'
charset-normalizer==2.0.12; python_version >= '3.10'
cryptography==41.0.0; python_version >= '3.10'
frozenlist==1.3.0; python_version >= '3.10'
attrs==25.4.0; python_version >= '3.10'
certifi==2026.2.25; python_version >= '3.10'
charset-normalizer==3.4.6; python_version >= '3.10'
cryptography==46.0.5; python_version >= '3.10'
frozenlist==1.8.0; python_version >= '3.10'
httpretty==1.1.4; python_version >= '3.10'
idna-ssl==1.1.0; python_version >= '3.5' and python_version < '3.7'
idna==3.3; python_version >= '3.10'
idna==3.11; python_version >= '3.10'
multidict==4.5.2; python_version >= '3.5' and python_version < '3.10'
multidict==6.0.2; python_version >= '3.10'
multidict==6.7.1; python_version >= '3.10'
propcache==0.4.1; python_version >= '3.10'
py==1.11.0; python_version >= '3.10'
pycparser==2.21; python_version >= '3.10'
PyNaCl==1.5.0; python_version >= '3.10'
pycparser==2.23; python_version >= '3.10'
PyNaCl==1.6.2; python_version >= '3.10'
pyparsing==3.0.8; python_version >= '3.10'
requests==2.27.1; python_version >= '3.10'
six==1.16.0; python_version >= '3.10'
requests==2.32.4; python_version >= '3.10'
six==1.17.0; python_version >= '3.10'
tornado==5.1.1; python_version < '3.5'
tornado==6.0.2; python_version >= '3.5' and python_version < '3.10'
urllib3==1.26.9; python_version >= '3.10'
urllib3==2.6.3; python_version >= '3.10'
yarl==1.3.0; python_version >= '3.5' and python_version < '3.10'
yarl==1.7.2; python_version >= '3.10'
yarl==1.22.0; python_version >= '3.10'
Loading