Skip to content

fix: constrain starlette to >=1.0.1 (CVE-2026-48710) - #174

Merged
derekhiggins merged 2 commits into
opendatahub-io:release-v3.3from
derekhiggins:release-v3.3-starlette-cve
Jun 4, 2026
Merged

fix: constrain starlette to >=1.0.1 (CVE-2026-48710)#174
derekhiggins merged 2 commits into
opendatahub-io:release-v3.3from
derekhiggins:release-v3.3-starlette-cve

Conversation

@derekhiggins

@derekhiggins derekhiggins commented Jun 3, 2026

Copy link
Copy Markdown
Collaborator

Summary

Test plan

  • CI passes
  • Verify starlette resolves to >=1.0.1

eoinfennessy and others added 2 commits June 3, 2026 09:22
@eoinfennessy @mattf @derekhiggins
fix: constrain starlette to >=1.0.1 (CVE-2026-48710) (ogx-ai#5977)
76c9976 
GHSA-86qp-5c8j-p5mr
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/ogx-ai/ogx/pull/5977"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open in Devin Review">
  </picture>
</a>
<!-- devin-review-badge-end -->

---------

Signed-off-by: Eoin Fennessy <efenness@redhat.com>
Co-authored-by: Matthew Farrellee <matt@cs.wisc.edu>
(cherry picked from commit 41c94c4)
Signed-off-by: Charlie Doern <cdoern@redhat.com>
Signed-off-by: Derek Higgins <derekh@redhat.com>
@derekhiggins @claude
chore: bump version to 0.4.2.2+rhai0
13e7f5e 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Derek Higgins <derekh@redhat.com>
@coderabbitai

coderabbitai Bot commented Jun 3, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (4)
  • main
  • master
  • incubation
  • rhoai

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: c2cb4c84-fc81-4602-9bed-1f32f047989a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

cdoern
cdoern approved these changes Jun 3, 2026
View reviewed changes

@cdoern cdoern left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@derekhiggins

derekhiggins commented Jun 4, 2026

Copy link
Copy Markdown
Collaborator Author

Merging build failures are unrelated

@derekhiggins
derekhiggins merged commit 42fc324 into opendatahub-io:release-v3.3 Jun 4, 2026
47 of 54 checks passed
@mfleader mfleader mentioned this pull request Jun 18, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cdoern cdoern cdoern approved these changes
@eoinfennessy eoinfennessy eoinfennessy approved these changes
@leseb leseb Awaiting requested review from leseb leseb is a code owner
@franciscojavierarceo franciscojavierarceo Awaiting requested review from franciscojavierarceo franciscojavierarceo is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@derekhiggins @cdoern @eoinfennessy