astro-sdk
astro-sdk copied to clipboard
Restrict protobuf to <3.20 due to denial of service issue with version >=3.20.0, <3.20.2
We're alerted by Dependabot for the below security issue and hence we need to restrict protobuf version to <3.20.

Codecov Report
Base: 95.71% // Head: 95.71% // No change to project coverage :thumbsup:
Coverage data is based on head (
6e1e020) compared to base (8a544fa). Patch has no changes to coverable lines.
Additional details and impacted files
@@ Coverage Diff @@
## main #1071 +/- ##
=======================================
Coverage 95.71% 95.71%
=======================================
Files 19 19
Lines 677 677
Branches 68 68
=======================================
Hits 648 648
Misses 18 18
Partials 11 11
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.
:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.
@pankajkoti any reason why we didn't merge this? Does it still make sense...? Should we rebase/merge or close it?
We're no longer seeing this issue on main. So closing for now. If we see this again, we will reopen it.