LCORE-1817: Bump-up chardet [Konflux]

[tisnik]

Description

LCORE-1817: Bump-up chardet [Konflux]

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up service version
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change
• Unit tests improvement
• Integration tests improvement
• End to end tests improvement
• Benchmarks improvement

Tools used to create PR

• Assisted-by: N/A
• Generated by: N/A

Related Tickets & Documents

• Related Issue #LCORE-1817

Summary by CodeRabbit

• Chores
  • Updated internal dependencies.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 8d11a8d6-b0e5-413c-aa4a-fa6c343fce63

📥 Commits

Reviewing files that changed from the base of the PR and between 39016c9 and 4e9b82c.

📒 Files selected for processing (1)

• .konflux/requirements.hashes.source.txt

📜 Recent review details

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

• GitHub Check: Konflux kflux-prd-rh02 / lightspeed-stack-on-pull-request

🔇 Additional comments (1)

.konflux/requirements.hashes.source.txt (1)

153-189: ⚡ Quick win

Update: chardet 7.4.3 is available on PyPI and no upstream security issues are indicated

• chardet 7.4.3 is published (patch release; release notes describe a crash/ValueError fix for inputs containing null bytes).
• Reported CVEs in security tooling are not shown as direct upstream chardet vulnerabilities; they appear tied to distribution/packaging context rather than the upstream package itself.

---

Walkthrough

Updates the chardet dependency from version 7.4.0.post2 to 7.4.3 and replaces all associated SHA256 hashes in the lockfile to match the new pinned version.

Changes

Dependency Update

Layer / File(s)	Summary
Chardet version and hash update .konflux/requirements.hashes.source.txt	Chardet requirement pinned version changes from 7.4.0.post2 to 7.4.3 with all SHA256 hashes replaced to correspond to the updated release.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: bumping the chardet dependency version in the Konflux configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

✨ Simplify code

• Create PR with simplified code

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[tisnik]

/retest

[tisnik]

/test

[tisnik]

/retest

[openshift-ci]

@tisnik: No presubmit jobs available for lightspeed-core/lightspeed-stack@main

Details

In response to this:

/test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.