Skip to content

[MCC-1487246] Fix Dependabot reported vulnerabilities#46

Closed
ibaig-mdsol wants to merge 1 commit into
mainfrom
fixMCC-1487246_dependabot
Closed

[MCC-1487246] Fix Dependabot reported vulnerabilities#46
ibaig-mdsol wants to merge 1 commit into
mainfrom
fixMCC-1487246_dependabot

Conversation

@ibaig-mdsol

Copy link
Copy Markdown
Contributor

tech_debt

Checklist

  • Review the pull request to fix typos and ensure variable/function names are intuitive, etc.
  • Make sure the pull request does not have excessive number of unnecessary commits. Utilize the git commit --amend --no-edit command to reduce commit messages when making small file changes (like changing linespacing).
  • Make sure you have added unit tests for the code changes. Tests should be added in the tests/ folder.
  • Modify docs, if required. Add any new documentation in the doc/ folder.
  • Rebase on latest active development branch (develop/main).

Changes Summary

- Dependabot vulnerabilities fixed

image

Copilot AI review requested due to automatic review settings June 10, 2026 15:08

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request addresses Dependabot-reported vulnerabilities by updating pinned dependency versions and refreshing the Poetry lockfile, while also removing unused template/original configuration files from the repository.

Changes:

  • Bump pyarrow to 23.0.1 and gunicorn to 22.0.0 in pyproject.toml.
  • Regenerate poetry.lock to reflect updated dependency resolution.
  • Remove legacy/template files (README_orig.md, pyproject_orig.toml) from the repo.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
README_orig.md Removes an unused template/original README artifact.
pyproject.toml Updates dependency versions to remediate reported vulnerabilities.
pyproject_orig.toml Removes an unused template/original Poetry configuration artifact.
poetry.lock Updates locked dependency graph to match the bumped dependency versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@ibaig-mdsol ibaig-mdsol deleted the fixMCC-1487246_dependabot branch June 21, 2026 07:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants