From 252f1fad152aec449834df9a49f7edac75eab000 Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Fri, 22 May 2026 15:56:18 -0400 Subject: [PATCH 1/8] Bump backoff from 1.8.0 to 1.10.0 Aligns with the minimum approved version in qlik-3pl. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index 9d7ba46..1e0ccf4 100644 --- a/setup.py +++ b/setup.py @@ -12,7 +12,7 @@ install_requires=[ 'singer-python==5.12.1', 'requests==2.32.4', - 'backoff==1.8.0' + 'backoff==1.10.0' ], extras_require={ 'dev': [ From 4d34994372f1f191c115449fd9578793edd5adf3 Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:32:54 -0400 Subject: [PATCH 2/8] Update CHANGELOG for 3.3.4 --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index c6f5d5b..0e6dd83 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,6 @@ +## 3.3.4 + * Bump requests to 2.33.0 (CVE-2026-25645) + # Changelog # 3.3.4 From 28018de63f830efcf29da2bfecf4653fba58e836 Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:33:55 -0400 Subject: [PATCH 3/8] Fix CHANGELOG: merge CVE entry into existing 3.3.4 --- CHANGELOG.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0e6dd83..88642da 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,9 +1,7 @@ -## 3.3.4 - * Bump requests to 2.33.0 (CVE-2026-25645) - # Changelog # 3.3.4 + * Bump requests to 2.33.0 (CVE-2026-25645) * Fix malformed URL causing 'since' filter to be dropped for Issues and Comments streams [#230](https://github.com/singer-io/tap-github/pull/230) # 3.3.3 @@ -210,4 +208,4 @@ * [#9](https://github.com/singer-io/tap-github/pull/9) ## 0.3.0 - * Adds support for retrieving pull requests, assignees and collaborars [#8](https://github.com/singer-io/tap-github/pull/8) + * Adds support for retrieving pull requests, assignees and collaborars [#8](https://github.com/singer-io/tap-github/pull/8) \ No newline at end of file From fd0f5c72e847b67914b1b3f1e356a46fd192788e Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:38:46 -0400 Subject: [PATCH 4/8] Bump version to 3.3.5 Patch bump for requests 2.33.0 CVE fix + backoff upgrade. --- setup.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/setup.py b/setup.py index fe279bc..e825bf0 100644 --- a/setup.py +++ b/setup.py @@ -3,7 +3,7 @@ from setuptools import setup, find_packages setup(name='tap-github', - version='3.3.4', + version='3.3.5', description='Singer.io tap for extracting data from the GitHub API', author='Stitch', url='http://singer.io', @@ -31,4 +31,4 @@ 'tap_github': ['tap_github/schemas/*.json'] }, include_package_data=True -) +) \ No newline at end of file From a2691ad72d033debf334e809eae3691d1cdb2a64 Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:38:56 -0400 Subject: [PATCH 5/8] Update CHANGELOG version to 3.3.5 From 3871d4aa2f0cab3e1d52d5f652b54336d44ff51f Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:39:18 -0400 Subject: [PATCH 6/8] Fix CHANGELOG version header to 3.3.5 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 88642da..d314d79 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -# 3.3.4 +# 3.3.5 * Bump requests to 2.33.0 (CVE-2026-25645) * Fix malformed URL causing 'since' filter to be dropped for Issues and Comments streams [#230](https://github.com/singer-io/tap-github/pull/230) From 6dd01e09f0d692624fa1b3fb659058eb1a638060 Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:40:13 -0400 Subject: [PATCH 7/8] Update CHANGELOG for version 3.3.5 Added entry for version 3.3.5 with requests bump. --- CHANGELOG.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d314d79..2dce532 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ # 3.3.5 * Bump requests to 2.33.0 (CVE-2026-25645) + +# 3.3.4 * Fix malformed URL causing 'since' filter to be dropped for Issues and Comments streams [#230](https://github.com/singer-io/tap-github/pull/230) # 3.3.3 @@ -208,4 +210,4 @@ * [#9](https://github.com/singer-io/tap-github/pull/9) ## 0.3.0 - * Adds support for retrieving pull requests, assignees and collaborars [#8](https://github.com/singer-io/tap-github/pull/8) \ No newline at end of file + * Adds support for retrieving pull requests, assignees and collaborars [#8](https://github.com/singer-io/tap-github/pull/8) From d9fae038a4d56f9e77174054e9aed90f0ea5040c Mon Sep 17 00:00:00 2001 From: Bryant Gray Date: Wed, 27 May 2026 10:40:34 -0400 Subject: [PATCH 8/8] Fix missing newline at end of setup.py --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index e825bf0..49a4429 100644 --- a/setup.py +++ b/setup.py @@ -31,4 +31,4 @@ 'tap_github': ['tap_github/schemas/*.json'] }, include_package_data=True -) \ No newline at end of file +)