nominal 1.104.1__tar.gz → 1.104.2__tar.gz

{nominal-1.104.1 → nominal-1.104.2}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.104.2](https://github.com/nominal-io/nominal-client/compare/v1.104.1...v1.104.2) (2026-01-08)
+
+
+### Bug Fixes
+
+* explicitly pin version of urllib to fix CVE ([#571](https://github.com/nominal-io/nominal-client/issues/571)) ([2014e51](https://github.com/nominal-io/nominal-client/commit/2014e51d95e8cf804b1dce269402b2671f5153f8))
+
 ## [1.104.1](https://github.com/nominal-io/nominal-client/compare/v1.104.0...v1.104.1) (2026-01-08)
 
 

{nominal-1.104.1 → nominal-1.104.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nominal
-Version: 1.104.1
+Version: 1.104.2
 Summary: Automate Nominal workflows in Python
 Project-URL: Homepage, https://nominal.io
 Project-URL: Documentation, https://docs.nominal.io
@@ -33,6 +33,7 @@ Requires-Dist: tabulate<0.10,>=0.9.0
 Requires-Dist: truststore>=0.10.4
 Requires-Dist: types-cachetools>=6.0.0.20250525
 Requires-Dist: typing-extensions<5,>=4
+Requires-Dist: urllib3==2.6.3
 Provides-Extra: protos
 Requires-Dist: nominal-api-protos>=0.949.2; extra == 'protos'
 Provides-Extra: tdms

{nominal-1.104.1 → nominal-1.104.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "nominal"
-version = "1.104.1"
+version = "1.104.2"
 description = "Automate Nominal workflows in Python"
 authors = [
     { name = "Alexander Reynolds", email = "alex.reynolds@nominal.io" },
@@ -49,6 +49,8 @@ dependencies = [
     # list only the exact platforms supported
     # TODO(drake): support more architectures and clean up dependency markers.
     "nominal-streaming==0.5.8; platform_python_implementation=='CPython' and python_version>='3.10' and ((sys_platform=='win32' and platform_machine=='AMD64') or (sys_platform=='darwin' and platform_machine=='arm64') or (sys_platform=='linux' and (platform_machine=='x86_64' or platform_machine=='armv7l')))",
+    # Explicitly specifying urllib3 version to handle CVE present in earlier versions
+    "urllib3==2.6.3",
 ]
 
 
@@ -173,10 +175,6 @@ disable_error_code = ["no-untyped-def"]
 [tool.pytest.ini_options]
 filterwarnings = [
     "error", # transform all warnings into errors, except ignore: ones.
-    # DeprecationWarning: The 'strict' parameter is no longer needed on Python 3+. This will raise an error in urllib3 v2.1.0.
-    # from conjure-python-client, in conjure_python_client/_http/requests_client.py,
-    # TransportAdapter.init_poolmanager() uses urllib3.poolmanager.PoolManager(..., strict=True) which is deprecated.
-    "ignore:The 'strict' parameter is no longer needed on Python 3+.",
 ]
 testpaths = ["tests"]
 # make tests/e2e opt-in (they require a Nominal instance)