Skip to content

chore(deps): Bump brotli to 1.2.1 - #8122

Open
sentry-junior[bot] wants to merge 1 commit into
masterfrom
deps/bump-brotli-1.2.1
Open

sentry-junior[bot] wants to merge 1 commit into
masterfrom
deps/bump-brotli-1.2.1

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps brotli from 1.2.0 to 1.2.1 in uv.lock to fix GHSA-9v8h-qqgm-4m35 (CVE-2026-111497), a buffer overflow in the Brotli decoder.

brotli is only a dev dependency here. statsig in the typing group pulls it in, so this doesn't change anything users of the SDK install.

I generated the lockfile with uv lock --upgrade-package brotli against the Sentry package index. brotli is the only package that changed, and uv lock --check passes.

via Geoff Goldsmith.

--

View Junior Session [Sentry]

Fixes GHSA-9v8h-qqgm-4m35 (CVE-2026-111497) in the Brotli decoder.
brotli is a transitive dev dependency via statsig.

Co-Authored-By: Geoff Goldsmith <[email protected]>
@sentry-junior
sentry-junior Bot requested a review from a team as a code owner October 26, 2026 16:11
@github-actions

github-actions Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Coverage Results 📊

✅ 134372 passed | ⏭️ 7334 skipped | Total: 141706 | Pass Rate: 94.82% | Execution Time: 454m 46s

📊 Comparison with Base Branch

Metric Change
Total Tests 📈 +1408
Passed Tests 📈 +1405
Failed Tests 📉 -3
Skipped Tests 📈 +6

➖ Removed Tests (3)

View removed tests
  • test_user_identity_error_event_data_collection[legacy_send_default_pii_true-application0]
    • File: tests.integrations.django.asgi.test_asgi
  • test_cache_spans_templatetag[True]
    • File: tests.integrations.django.test_cache_module
  • test_cache_spans_templatetag[True]
    • File: tests.integrations.django.test_cache_module

All tests are passing successfully.

✅ Patch coverage is 100.00% (no changed executable lines found; target 80%).
Project statement coverage is 90.31% (unchanged from base (9e4ba4c) to head (35d7a6e)).

Coverage diff
@@            Coverage Diff             @@
##        master     #8122       +/-##
==========================================
  Coverage    90.31%    90.31%        —%
==========================================
  Files          203       203         —
  Tracked lines     26880     26880         —
  Branches     10042     10042         —
==========================================
- Hits         24276     24275        -1
- Misses        2604      2605        +1
- Partials      1517      1518        +1

Generated by Coverage Action

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants