Skip to content

Fix security vulnerability: Change HTTP URLs to HTTPS#189

Merged
ndgrigorian merged 1 commit intomasterfrom
fix-http-urls
Apr 24, 2026
Merged

Fix security vulnerability: Change HTTP URLs to HTTPS#189
ndgrigorian merged 1 commit intomasterfrom
fix-http-urls

Conversation

@antonwolfy
Copy link
Copy Markdown
Collaborator

This PR fixes security vulnerability by changing all GitHub repository URLs from insecure HTTP to secure HTTPS and also updates project metadata in pyproject.toml and both conda recipe files.

Changed all GitHub repository URLs from http:// to https:// in project
metadata files to address security vulnerability. Insecure HTTP connections
are vulnerable to man-in-the-middle attacks.

Updated files:
- pyproject.toml: Download and Homepage URLs
- conda-recipe/meta.yaml: home URL
- conda-recipe-cf/meta.yaml: home URL

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
@antonwolfy antonwolfy added this to the 2.8.0 release milestone Apr 24, 2026
@antonwolfy antonwolfy self-assigned this Apr 24, 2026
Copy link
Copy Markdown
Collaborator

@ndgrigorian ndgrigorian left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ndgrigorian ndgrigorian merged commit b8bd1e2 into master Apr 24, 2026
105 checks passed
@ndgrigorian ndgrigorian deleted the fix-http-urls branch April 24, 2026 18:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants