1247994 - Upgrade vendored requests Python package

Status: RESOLVED FIXED

(Firefox Build System :: General, defect)

Description

[Gregory Szorc [:gps]]

We currently have version 2.5.1 of the "requests" Python package vendored in tree. There are a number of bug fixes in the latest version, including CVE-2015-2296. We should upgrade.

https://treeherder.mozilla.org/#/jobs?repo=try&revision=f915d1799171 indicates that automation was happy with 2.9.1. Will submit a rubber stamp patch shortly...

Comment 1

[Gregory Szorc [:gps]]

Attachment: MozReview Request: Bug 1247994 - Upgrade vendored requests package to 2.9.1; r?mshal

Previously, we We were running version 2.5.1 of requests. Newer
versions have several bug fixes and even address a CVE.

Source was obtained from
https://pypi.python.org/packages/source/r/requests/requests-2.9.1.tar.gz
and checked in without modification. This should be a rubber stamp
review.

Review commit: https://reviewboard.mozilla.org/r/34801/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/34801/

Comment 2

[Michael Shal [:mshal]]

Comment on attachment 8718924 [details]
MozReview Request: Bug 1247994 - Upgrade vendored requests package to 2.9.1; r?mshal

https://reviewboard.mozilla.org/r/34801/#review31703

Comment 3

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/8e7ae3dc7387

Comment 4

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/8e7ae3dc7387