all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe70:ec85
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 95a29e28-30ab-43a9-b933-633a3d095adc
        host_id: 5afd8fc909abddfe2ce3a956a91bbe56629648b7209fd0acfa541862
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe70:ec85
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.177
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.223
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe70:ec85
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job hadolint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#37>'
      - '<Job hadolint explicit: None implied: None source: osism/container-image-kolla-ansible/.zuul.yaml@main#163>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: eb0f1c89de48415f99783adf146aa639
      build_refs:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMjMxLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        patchset: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      buildset: ab2041224ce040dc8eaa152aa630e5a6
      buildset_refs:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMjMxLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        patchset: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      change: '882'
      change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis PR
        contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
        | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
        |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
        utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
        data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
        function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
        / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
        information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
        utility function uses a predictable filename when extracting files from zip
        archives into the system temporary directory. If the target file already exists,
        it is reused without validation. A local attacker with write access to the
        temp directory could pre-create a malicious file that would be loaded in place
        of the legitimate one.\n\n##### Affected usages\n**Standard usage of the Requests
        library is not affected by this vulnerability.** Only applications that call
        `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
        to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
        location.\n\nIf developers are unable to upgrade, they can set `TMPDIR` in
        their environment to a directory with restricted write access.\n\n#### Severity\n-
        CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
        References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
        [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
        [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
        [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
        [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
        data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
        and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
        ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
        [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
        Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
        \U0001F4E3 Requests is adding inline types. If you have a typed code base
        that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
        Give it a try, and report\n  any gaps or feedback you may have in the issue.
        \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
        now extracts\n  contents to a non-deterministic location to prevent malicious
        file\n  replacement. This does not affect default usage of Requests, only\n
        \ applications calling the utility function directly.\n\n**Improvements**\n\n-
        Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
        Fixed an issue where an empty netrc entry could cause\n  malformed authentication
        to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
        Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
        Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
        Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
        Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
        **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
        checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
        about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
        to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by
        [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMjMxLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
      child_jobs: []
      commit_id: 42fe86de44acb7f1ae09b290ff5102662f49a86a
      event_id: e0fd9820-6c77-11f1-9464-645ee5c9bcd2
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/eb0f1c89de48415f99783adf146aa639/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/eb0f1c89de48415f99783adf146aa639/work/logs
        result_data_file: /var/lib/zuul/builds/eb0f1c89de48415f99783adf146aa639/work/results.json
        src_root: /var/lib/zuul/builds/eb0f1c89de48415f99783adf146aa639/work/src
        work_root: /var/lib/zuul/builds/eb0f1c89de48415f99783adf146aa639/work
      include_vars: []
      items:
      - branch: main
        change: '882'
        change_message: "Update dependency requests to v2.33.0 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
          | `==2.32.5` \u2192 `==2.33.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.32.5/2.33.0?slim=true)
          |\n\n---\n\n### Requests has Insecure Temp File Reuse in its extract_zipped_paths()
          utility function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\nThis
          data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility
          function\n[CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)
          / [GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/advisories/GHSA-gc5v-m9x4-r6x2)\n\n<details>\n<summary>More
          information</summary>\n\n#### Details\n##### Impact\nThe `requests.utils.extract_zipped_paths()`
          utility function uses a predictable filename when extracting files from
          zip archives into the system temporary directory. If the target file already
          exists, it is reused without validation. A local attacker with write access
          to the temp directory could pre-create a malicious file that would be loaded
          in place of the legitimate one.\n\n##### Affected usages\n**Standard usage
          of the Requests library is not affected by this vulnerability.** Only applications
          that call `extract_zipped_paths()` directly are impacted.\n\n##### Remediation\nUpgrade
          to at least Requests 2.33.0, where the library now extracts files to a non-deterministic
          location.\n\nIf developers are unable to upgrade, they can set `TMPDIR`
          in their environment to a directory with restricted write access.\n\n####
          Severity\n- CVSS Score: 4.4 / 10 (Medium)\n- Vector String: `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N`\n\n####
          References\n- [https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2](https://redirect.github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2)\n-
          [https://nvd.nist.gov/vuln/detail/CVE-2026-25645](https://nvd.nist.gov/vuln/detail/CVE-2026-25645)\n-
          [https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7](https://redirect.github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7)\n-
          [https://github.com/psf/requests](https://redirect.github.com/psf/requests)\n-
          [https://github.com/psf/requests/releases/tag/v2.33.0](https://redirect.github.com/psf/requests/releases/tag/v2.33.0)\n\nThis
          data is provided by [OSV](https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2)
          and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database)
          ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n</details>\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>psf/requests (requests)</summary>\n\n###
          [`v2.33.0`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2330-2026-03-25)\n\n[Compare
          Source](https://redirect.github.com/psf/requests/compare/v2.32.5...v2.33.0)\n\n**Announcements**\n\n-
          \U0001F4E3 Requests is adding inline types. If you have a typed code base
          that\n  uses Requests, please take a look at [#&#8203;7271](https://redirect.github.com/psf/requests/issues/7271).
          Give it a try, and report\n  any gaps or feedback you may have in the issue.
          \U0001F4E3\n\n**Security**\n\n- CVE-2026-25645 `requests.utils.extract_zipped_paths`
          now extracts\n  contents to a non-deterministic location to prevent malicious
          file\n  replacement. This does not affect default usage of Requests, only\n
          \ applications calling the utility function directly.\n\n**Improvements**\n\n-
          Migrated to a PEP 517 build system using setuptools. ([#&#8203;7012](https://redirect.github.com/psf/requests/issues/7012))\n\n**Bugfixes**\n\n-
          Fixed an issue where an empty netrc entry could cause\n  malformed authentication
          to be applied to Requests on\n  Python 3.11+. ([#&#8203;7205](https://redirect.github.com/psf/requests/issues/7205))\n\n**Deprecations**\n\n-
          Dropped support for Python 3.9 following its end of support. ([#&#8203;7196](https://redirect.github.com/psf/requests/issues/7196))\n\n**Documentation**\n\n-
          Various typo fixes and doc improvements.\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-kolla-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuMjMxLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/882
        commit_id: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        patchset: 42fe86de44acb7f1ae09b290ff5102662f49a86a
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      job: hadolint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 42fe86de44acb7f1ae09b290ff5102662f49a86a
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/hadolint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-kolla-ansible
        name: osism/container-image-kolla-ansible
        short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
      projects:
        github.com/osism/container-image-kolla-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 7a98d5e3095130f3b1f91c64d9a0c0cd9b14097c
          name: osism/container-image-kolla-ansible
          required: false
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
      ref: refs/pull/882/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
