all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fee0:5165
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 6c4f5485-ea94-4af9-9343-93403aac1f4c
        host_id: de4c9765152b8ccf16bcbbf90e33fb083884dc744cc344501046bc88
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fee0:5165
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.107
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.110
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fee0:5165
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/openstack-sandbox-manager/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: e00bfb2fbdb14aabaf58d6c87fb1864e
      build_refs:
      - branch: main
        change: '107'
        change_message: "chore(deps): update dependency requests to v2.33.0 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/openstack-sandbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTM4LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/openstack-sandbox-manager/pull/107
        commit_id: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        patchset: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-sandbox-manager
          name: osism/openstack-sandbox-manager
          short_name: openstack-sandbox-manager
        src_dir: src/github.com/osism/openstack-sandbox-manager
        topic: null
      buildset: bacec1fd7778419d9724ac2e0909f1e1
      buildset_refs:
      - branch: main
        change: '107'
        change_message: "chore(deps): update dependency requests to v2.33.0 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/openstack-sandbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTM4LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/openstack-sandbox-manager/pull/107
        commit_id: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        patchset: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-sandbox-manager
          name: osism/openstack-sandbox-manager
          short_name: openstack-sandbox-manager
        src_dir: src/github.com/osism/openstack-sandbox-manager
        topic: null
      change: '107'
      change_message: "chore(deps): update dependency requests to v2.33.0 [security]\n\nThis
        PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
        | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
        |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
        utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
        data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
        [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
        \U0001F4E3 Requests is adding inline types. If you have a typed code base
        that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
        Give it a try, and report\n  any gaps or feedback you may have in the issue.
        \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
        now extracts\n  contents to a non-deterministic location to prevent malicious
        file\n  replacement. This does not affect default usage of Requests, only\n
        \ applications calling the utility function directly.\n\n**Improvements**\n\n-
        Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
        Fixed an issue where an empty netrc entry could cause\n  malformed authentication
        to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
        Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
        Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At any
        time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config.
        Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
        Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
        **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/openstack-sandbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTM4LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/openstack-sandbox-manager/pull/107
      child_jobs: []
      commit_id: f53815aa02e80b7711e31bb59b61b8bee0f89dda
      event_id: e95629f0-529c-11f1-8655-a041eef8240e
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/e00bfb2fbdb14aabaf58d6c87fb1864e/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/e00bfb2fbdb14aabaf58d6c87fb1864e/work/logs
        result_data_file: /var/lib/zuul/builds/e00bfb2fbdb14aabaf58d6c87fb1864e/work/results.json
        src_root: /var/lib/zuul/builds/e00bfb2fbdb14aabaf58d6c87fb1864e/work/src
        work_root: /var/lib/zuul/builds/e00bfb2fbdb14aabaf58d6c87fb1864e/work
      include_vars: []
      items:
      - branch: main
        change: '107'
        change_message: "chore(deps): update dependency requests to v2.33.0 [security]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - \"\"\n- Automerge\n  - At
          any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by
          config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
          Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
          **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/openstack-sandbox-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMTM4LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/openstack-sandbox-manager/pull/107
        commit_id: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        patchset: f53815aa02e80b7711e31bb59b61b8bee0f89dda
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-sandbox-manager
          name: osism/openstack-sandbox-manager
          short_name: openstack-sandbox-manager
          src_dir: src/github.com/osism/openstack-sandbox-manager
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IHJlcXVlc3RzIHRvIHYyLjMzLjAgW3NlY3VyaXR5XQoKVGhpcyBQUiBjb250YWlucyB0aGUgZm9sbG93aW5nIHVwZGF0ZXM6Cgp8IFBhY2thZ2UgfCBDaGFuZ2UgfCBbQWdlXShodHRwczovL2RvY3MucmVub3ZhdGVib3QuY29tL21lcmdlLWNvbmZpZGVuY2UvKSB8IFtDb25maWRlbmNlXShodHRwczovL2RvY3MucmVub3ZhdGVib3QuY29tL21lcmdlLWNvbmZpZGVuY2UvKSB8CnwtLS18LS0tfC0tLXwtLS18CnwgW3JlcXVlc3RzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcHNmL3JlcXVlc3RzKSAoW2NoYW5nZWxvZ10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BzZi9yZXF1ZXN0cy9ibG9iL21hc3Rlci9ISVNUT1JZLm1kKSkgfCBgPT0yLjMyLjVgIOKGkiBgPT0yLjMzLjBgIHwgIVthZ2VdKGh0dHBzOi8vZGV2ZWxvcGVyLm1lbmQuaW8vYXBpL21jL2JhZGdlcy9hZ2UvcHlwaS9yZXF1ZXN0cy8yLjMzLjA/c2xpbT10cnVlKSB8ICFbY29uZmlkZW5jZV0oaHR0cHM6Ly9kZXZlbG9wZXIubWVuZC5pby9hcGkvbWMvYmFkZ2VzL2NvbmZpZGVuY2UvcHlwaS9yZXF1ZXN0cy8yLjMyLjUvMi4zMy4wP3NsaW09dHJ1ZSkgfAoKLS0tCgojIyMgUmVxdWVzdHMgaGFzIEluc2VjdXJlIFRlbXAgRmlsZSBSZXVzZSBpbiBpdHMgZXh0cmFjdF96aXBwZWRfcGF0aHMoKSB1dGlsaXR5IGZ1bmN0aW9uCltDVkUtMjAyNi0yNTY0NV0oaHR0cHM6Ly9udmQubmlzdC5nb3YvdnVsbi9kZXRhaWwvQ1ZFLTIwMjYtMjU2NDUpIC8gW0dIU0EtZ2M1di1tOXg0LXI2eDJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hZHZpc29yaWVzL0dIU0EtZ2M1di1tOXg0LXI2eDIpCgo8ZGV0YWlscz4KPHN1bW1hcnk+TW9yZSBpbmZvcm1hdGlvbjwvc3VtbWFyeT4KCiMjIyMgRGV0YWlscwojIyMjIyBJbXBhY3QKVGhlIGByZXF1ZXN0cy51dGlscy5leHRyYWN0X3ppcHBlZF9wYXRocygpYCB1dGlsaXR5IGZ1bmN0aW9uIHVzZXMgYSBwcmVkaWN0YWJsZSBmaWxlbmFtZSB3aGVuIGV4dHJhY3RpbmcgZmlsZXMgZnJvbSB6aXAgYXJjaGl2ZXMgaW50byB0aGUgc3lzdGVtIHRlbXBvcmFyeSBkaXJlY3RvcnkuIElmIHRoZSB0YXJnZXQgZmlsZSBhbHJlYWR5IGV4aXN0cywgaXQgaXMgcmV1c2VkIHdpdGhvdXQgdmFsaWRhdGlvbi4gQSBsb2NhbCBhdHRhY2tlciB3aXRoIHdyaXRlIGFjY2VzcyB0byB0aGUgdGVtcCBkaXJlY3RvcnkgY291bGQgcHJlLWNyZWF0ZSBhIG1hbGljaW91cyBmaWxlIHRoYXQgd291bGQgYmUgbG9hZGVkIGluIHBsYWNlIG9mIHRoZSBsZWdpdGltYXRlIG9uZS4KCiMjIyMjIEFmZmVjdGVkIHVzYWdlcwoqKlN0YW5kYXJkIHVzYWdlIG9mIHRoZSBSZXF1ZXN0cyBsaWJyYXJ5IGlzIG5vdCBhZmZlY3RlZCBieSB0aGlzIHZ1bG5lcmFiaWxpdHkuKiogT25seSBhcHBsaWNhdGlvbnMgdGhhdCBjYWxsIGBleHRyYWN0X3ppcHBlZF9wYXRocygpYCBkaXJlY3RseSBhcmUgaW1wYWN0ZWQuCgojIyMjIyBSZW1lZGlhdGlvbgpVcGdyYWRlIHRvIGF0IGxlYXN0IFJlcXVlc3RzIDIuMzMuMCwgd2hlcmUgdGhlIGxpYnJhcnkgbm93IGV4dHJhY3RzIGZpbGVzIHRvIGEgbm9uLWRldGVybWluaXN0aWMgbG9jYXRpb24uCgpJZiBkZXZlbG9wZXJzIGFyZSB1bmFibGUgdG8gdXBncmFkZSwgdGhleSBjYW4gc2V0IGBUTVBESVJgIGluIHRoZWlyIGVudmlyb25tZW50IHRvIGEgZGlyZWN0b3J5IHdpdGggcmVzdHJpY3RlZCB3cml0ZSBhY2Nlc3MuCgojIyMjIFNldmVyaXR5Ci0gQ1ZTUyBTY29yZTogNC40IC8gMTAgKE1lZGl1bSkKLSBWZWN0b3IgU3RyaW5nOiBgQ1ZTUzozLjEvQVY6TC9BQzpIL1BSOkwvVUk6Ui9TOlUvQzpOL0k6SC9BOk5gCgojIyMjIFJlZmVyZW5jZXMKLSBbaHR0cHM6Ly9naXRodWIuY29tL3BzZi9yZXF1ZXN0cy9zZWN1cml0eS9hZHZpc29yaWVzL0dIU0EtZ2M1di1tOXg0LXI2eDJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wc2YvcmVxdWVzdHMvc2VjdXJpdHkvYWR2aXNvcmllcy9HSFNBLWdjNXYtbTl4NC1yNngyKQotIFtodHRwczovL2dpdGh1Yi5jb20vcHNmL3JlcXVlc3RzL2NvbW1pdC82NmQyMWNiMDdiZDYyNTViMTI4MDI5MWM0ZmFmYjcxODAzY2RiM2I3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcHNmL3JlcXVlc3RzL2NvbW1pdC82NmQyMWNiMDdiZDYyNTViMTI4MDI5MWM0ZmFmYjcxODAzY2RiM2I3KQotIFtodHRwczovL2dpdGh1Yi5jb20vcHNmL3JlcXVlc3RzL3JlbGVhc2VzL3RhZy92Mi4zMy4wXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcHNmL3JlcXVlc3RzL3JlbGVhc2VzL3RhZy92Mi4zMy4wKQotIFtodHRwczovL252ZC5uaXN0Lmdvdi92dWxuL2RldGFpbC9DVkUtMjAyNi0yNTY0NV0oaHR0cHM6Ly9udmQubmlzdC5nb3YvdnVsbi9kZXRhaWwvQ1ZFLTIwMjYtMjU2NDUpCi0gW2h0dHBzOi8vZ2l0aHViLmNvbS9hZHZpc29yaWVzL0dIU0EtZ2M1di1tOXg0LXI2eDJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hZHZpc29yaWVzL0dIU0EtZ2M1di1tOXg0LXI2eDIpCgpUaGlzIGRhdGEgaXMgcHJvdmlkZWQgYnkgdGhlIFtHaXRIdWIgQWR2aXNvcnkgRGF0YWJhc2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hZHZpc29yaWVzL0dIU0EtZ2M1di1tOXg0LXI2eDIpIChbQ0MtQlkgNC4wXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2l0aHViL2Fkdmlzb3J5LWRhdGFiYXNlL2Jsb2IvbWFpbi9MSUNFTlNFLm1kKSkuCjwvZGV0YWlscz4KCi0tLQoKIyMjIFJlbGVhc2UgTm90ZXMKCjxkZXRhaWxzPgo8c3VtbWFyeT5wc2YvcmVxdWVzdHMgKHJlcXVlc3RzKTwvc3VtbWFyeT4KCiMjIyBbYHYyLjMzLjBgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcHNmL3JlcXVlc3RzL2Jsb2IvSEVBRC9ISVNUT1JZLm1kIzIzMzAtMjAyNi0wMy0yNSkKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BzZi9yZXF1ZXN0cy9jb21wYXJlL3YyLjMyLjUuLi52Mi4zMy4wKQoKKipBbm5vdW5jZW1lbnRzKioKCi0g8J+ToyBSZXF1ZXN0cyBpcyBhZGRpbmcgaW5saW5lIHR5cGVzLiBJZiB5b3UgaGF2ZSBhIHR5cGVkIGNvZGUgYmFzZSB0aGF0CiAgdXNlcyBSZXF1ZXN0cywgcGxlYXNlIHRha2UgYSBsb29rIGF0IFsjJiM4MjAzOzcyNzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wc2YvcmVxdWVzdHMvaXNzdWVzLzcyNzEpLiBHaXZlIGl0IGEgdHJ5LCBhbmQgcmVwb3J0CiAgYW55IGdhcHMgb3IgZmVlZGJhY2sgeW91IG1heSBoYXZlIGluIHRoZSBpc3N1ZS4g8J+TowoKKipTZWN1cml0eSoqCgotIENWRS0yMDI2LTI1NjQ1IGByZXF1ZXN0cy51dGlscy5leHRyYWN0X3ppcHBlZF9wYXRoc2Agbm93IGV4dHJhY3RzCiAgY29udGVudHMgdG8gYSBub24tZGV0ZXJtaW5pc3RpYyBsb2NhdGlvbiB0byBwcmV2ZW50IG1hbGljaW91cyBmaWxlCiAgcmVwbGFjZW1lbnQuIFRoaXMgZG9lcyBub3QgYWZmZWN0IGRlZmF1bHQgdXNhZ2Ugb2YgUmVxdWVzdHMsIG9ubHkKICBhcHBsaWNhdGlvbnMgY2FsbGluZyB0aGUgdXRpbGl0eSBmdW5jdGlvbiBkaXJlY3RseS4KCioqSW1wcm92ZW1lbnRzKioKCi0gTWlncmF0ZWQgdG8gYSBQRVAgNTE3IGJ1aWxkIHN5c3RlbSB1c2luZyBzZXR1cHRvb2xzLiAoWyMmIzgyMDM7NzAxMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BzZi9yZXF1ZXN0cy9pc3N1ZXMvNzAxMikpCgoqKkJ1Z2ZpeGVzKioKCi0gRml4ZWQgYW4gaXNzdWUgd2hlcmUgYW4gZW1wdHkgbmV0cmMgZW50cnkgY291bGQgY2F1c2UKICBtYWxmb3JtZWQgYXV0aGVudGljYXRpb24gdG8gYmUgYXBwbGllZCB0byBSZXF1ZXN0cyBvbgogIFB5dGhvbiAzLjExKy4gKFsjJiM4MjAzOzcyMDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wc2YvcmVxdWVzdHMvaXNzdWVzLzcyMDUpKQoKKipEZXByZWNhdGlvbnMqKgoKLSBEcm9wcGVkIHN1cHBvcnQgZm9yIFB5dGhvbiAzLjkgZm9sbG93aW5nIGl0cyBlbmQgb2Ygc3VwcG9ydC4gKFsjJiM4MjAzOzcxOTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wc2YvcmVxdWVzdHMvaXNzdWVzLzcxOTYpKQoKKipEb2N1bWVudGF0aW9uKioKCi0gVmFyaW91cyB0eXBvIGZpeGVzIGFuZCBkb2MgaW1wcm92ZW1lbnRzLgoKPC9kZXRhaWxzPgoKLS0tCgojIyMgQ29uZmlndXJhdGlvbgoK8J+ThSAqKlNjaGVkdWxlKio6IChVVEMpCgotIEJyYW5jaCBjcmVhdGlvbgogIC0gIiIKLSBBdXRvbWVyZ2UKICAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKQoK8J+apiAqKkF1dG9tZXJnZSoqOiBEaXNhYmxlZCBieSBjb25maWcuIFBsZWFzZSBtZXJnZSB0aGlzIG1hbnVhbGx5IG9uY2UgeW91IGFyZSBzYXRpc2ZpZWQuCgrimbsgKipSZWJhc2luZyoqOiBXaGVuZXZlciBQUiBiZWNvbWVzIGNvbmZsaWN0ZWQsIG9yIHlvdSB0aWNrIHRoZSByZWJhc2UvcmV0cnkgY2hlY2tib3guCgrwn5SVICoqSWdub3JlKio6IENsb3NlIHRoaXMgUFIgYW5kIHlvdSB3b24ndCBiZSByZW1pbmRlZCBhYm91dCB0aGlzIHVwZGF0ZSBhZ2Fpbi4KCi0tLQoKIC0gWyBdIDwhLS0gcmViYXNlLWNoZWNrIC0tPklmIHlvdSB3YW50IHRvIHJlYmFzZS9yZXRyeSB0aGlzIFBSLCBjaGVjayB0aGlzIGJveAoKLS0tCgpUaGlzIFBSIHdhcyBnZW5lcmF0ZWQgYnkgW01lbmQgUmVub3ZhdGVdKGh0dHBzOi8vbWVuZC5pby9yZW5vdmF0ZS8pLiBWaWV3IHRoZSBbcmVwb3NpdG9yeSBqb2IgbG9nXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2dpdGh1Yi9vc2lzbS9vcGVuc3RhY2stc2FuZGJveC1tYW5hZ2VyKS4KPCEtLXJlbm92YXRlLWRlYnVnOmV5SmpjbVZoZEdWa1NXNVdaWElpT2lJME15NDVNUzQxSWl3aWRYQmtZWFJsWkVsdVZtVnlJam9pTkRNdU1UTTRMakVpTENKMFlYSm5aWFJDY21GdVkyZ2lPaUp0WVdsdUlpd2liR0ZpWld4eklqcGJJbkpsYm05MllYUmxJbDE5LS0+Cg==
      patchset: f53815aa02e80b7711e31bb59b61b8bee0f89dda
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/openstack-sandbox-manager
        name: osism/openstack-sandbox-manager
        short_name: openstack-sandbox-manager
        src_dir: src/github.com/osism/openstack-sandbox-manager
      projects:
        github.com/osism/openstack-sandbox-manager:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-sandbox-manager
          checkout: main
          checkout_description: zuul branch
          commit: e795b34fa2dede8818495f79fe98162bf078f62c
          name: osism/openstack-sandbox-manager
          required: false
          short_name: openstack-sandbox-manager
          src_dir: src/github.com/osism/openstack-sandbox-manager
      ref: refs/pull/107/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
