# Kombu \< 5.2.1 safety issues in dependencies. What it takes to migrate to 5.x?

**URL:** <https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722>\
**Category:** Uncategorized\
**Created:** [December 1, 2021, 12:00pm UTC](https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722 "2021-12-01T12:00:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![renewfrl](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.nameko.io/renewfrl/32/160_2.png) [@renewfrl](https://discourse.nameko.io/u/renewfrl)\
**Post date:** [December 1, 2021, 12:00pm UTC](https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722/1 "2021-12-01T12:00:26Z")

</div>

The latest release of kombu contained new versions for dependencies. According to safety.py these dependencies contained security fixes

([try latest sqs dependencies · celery/kombu@f3b0455 · GitHub](https://github.com/celery/kombu/commit/f3b04558fa0df4ecc383c93e0b3b300d95e17))

What does it take to update to kombu to 5.x? And can we contribute somehow?

I can’t oversee why kombu is pinned on 4.x

---

<div class="post-metadata">

**Author:** ![mattbennett](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.nameko.io/mattbennett/32/13_2.png) [@mattbennett](https://discourse.nameko.io/u/mattbennett)\
**Post date:** [December 2, 2021, 3:07pm UTC](https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722/2 "2021-12-02T15:07:39Z")

</div>

Hi @renewfrl,

[Python 3.10 support by mattbennett · Pull Request #747 · nameko/nameko · GitHub](https://github.com/nameko/nameko/pull/747) removes the kombu\<5 pin. I will create an equivalent for the v3 branch shortly, and cut new releases.

---

<div class="post-metadata">

**Author:** ![renewfrl](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.nameko.io/renewfrl/32/160_2.png) [@renewfrl](https://discourse.nameko.io/u/renewfrl)\
**Post date:** [December 2, 2021, 7:54pm UTC](https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722/3 "2021-12-02T19:54:11Z")

</div>

excellent @mattbennett great stuff

---

<div class="post-metadata">

**Author:** ![mattbennett](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.nameko.io/mattbennett/32/13_2.png) [@mattbennett](https://discourse.nameko.io/u/mattbennett)\
**Post date:** [December 6, 2021, 10:00am UTC](https://discourse.nameko.io/t/kombu-5-2-1-safety-issues-in-dependencies-what-it-takes-to-migrate-to-5-x/722/4 "2021-12-06T10:00:39Z")

</div>

This is out now in 2.14.1 and as 3.0.0-rc11.