Lokasi ngalangkungan proxy:   [ UP ]  
[Ngawartoskeun bug]   [Panyetelan cookie]                
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: kinletw/functions-framework-python
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: GoogleCloudPlatform/functions-framework-python
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 3 commits
  • 5 files changed
  • 3 contributors

Commits on Jun 17, 2026

  1. fix(ci): update allowed endpoints for harden-runner (GoogleCloudPlatf… 

    …orm#427)
    @taeold
    taeold authored Jun 17, 2026
    Configuration menu
    Copy the full SHA
    715ba9a View commit details
    Browse the repository at this point in the history

  2. fix(deps): bump starlette to >=1.0.1 on Python 3.10+ to fix PYSEC-202… 

    …6-161 (GoogleCloudPlatform#423)

Starlette <=1.0.0 is vulnerable to a missing Host header validation that poisons request.url.path and bypasses path-based security checks (GHSA-86qp-5c8j-p5mr / PYSEC-2026-161). The fix only landed in 1.0.1,
which requires Python >=3.10.

Constraint is split by interpreter version so Python 3.8/3.9 users keep the existing 0.x line (no upstream fix available) while Python 3.10+ pulls the patched 1.x line.

Co-authored-by: Daniel Lee <danielylee@google.com>
    @SpielerNogard @taeold
    SpielerNogard and taeold authored Jun 17, 2026
    Configuration menu
    Copy the full SHA
    c650171 View commit details
    Browse the repository at this point in the history

  3. chore(main): release 3.10.2 (GoogleCloudPlatform#417) 

    Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
    @release-please
    release-please[bot] authored Jun 17, 2026
    Configuration menu
    Copy the full SHA
    d13d9aa View commit details
    Browse the repository at this point in the history
Loading