build(deps): bump urllib3 in /tools/automatic_battery_tester
What changed, and why it matters
This is a routine automated dependency update by Dependabot. It bumps the urllib3 library used inside a non-production battery-testing tool from version 2.5.0 to 2.6.3. There is no indication in the commit that this fixes a security issue, and the changed file is not part of the Trezor firmware that runs on devices or handles cryptocurrency.
No security action required. Treat as normal dependency hygiene for an internal tooling directory.
Security signals we found
No strong security signals were identified.
Evidence from the diff
A single-line change in tools/automatic_battery_tester/requirements.txt updates urllib3 from 2.5.0 to 2.6.3. The automatic_battery_tester is an internal/development utility, not the embedded Trezor firmware, bootloader, or host wallet software. The commit message is a standard Dependabot build(deps) bump and does not mention any CVE, advisory, or security fix. No diff evidence of a vulnerability or exploit is present.
Changed components
tools/automatic_battery_tester/requirements.txtInspect captured patch +1 / −1
diff --git a/tools/automatic_battery_tester/requirements.txt b/tools/automatic_battery_tester/requirements.txt
index f7f8c105..734b459b 100644
--- a/tools/automatic_battery_tester/requirements.txt
+++ b/tools/automatic_battery_tester/requirements.txt
@@ -32,6 +32,6 @@ six==1.17.0
toml==0.10.2
typing_extensions==4.14.0
tzdata==2025.2
-urllib3==2.5.0
+urllib3==2.6.3
wcwidth==0.2.13
zeroconf==0.147.0
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.