Repository navigation
chore(deps): bump the pip-root-majors group across 1 directory with 6 updates - #259
dependabot[bot] wants to merge 1 commit into
Conversation
PR Check Results✅ Code Formatting: Passed |
|
| Severity | Count |
|---|---|
| 🔴 CRITICAL | 0 |
| 🟠 HIGH | 47 |
| Total | 47 |
Scans performed:
- 📁 Filesystem (vulnerabilities, secrets, misconfigurations)
- 🐳 Backend Docker image
- 🐳 Frontend Docker image
- 🏗️ IaC misconfiguration detection
📋 View detailed SARIF reports
Download artifacts from this workflow run for full SARIF reports.
Results are also available in the GitHub Security tab.
Trivy v0.71.0 | aquasecurity/trivy
27265be to
6894c2c
Compare
PR Check Results✅ Code Formatting: Passed |
6894c2c to
e77d3ff
Compare
PR Check Results✅ Code Formatting: Passed |
e77d3ff to
ca79875
Compare
PR Check Results✅ Code Formatting: Passed |
… updates Bumps the pip-root-majors group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [faker](https://github.com/joke2k/faker) | `23.2.0` | `40.43.0` | | [redis](https://github.com/redis/redis-py) | `5.0.1` | `8.1.0` | | [psutil](https://github.com/giampaolo/psutil) | `5.9.8` | `7.2.2` | | [mypy](https://github.com/python/mypy) | `1.8.0` | `2.4.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `3.6.0` | `4.6.2` | | [isort](https://github.com/PyCQA/isort) | `5.13.2` | `9.0.2` | Updates `faker` from 23.2.0 to 40.43.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v23.2.0...v40.43.0) Updates `redis` from 5.0.1 to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.1...v8.1.0) Updates `psutil` from 5.9.8 to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v5.9.8...v7.2.2) Updates `mypy` from 1.8.0 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.8.0...v2.4.0) Updates `pre-commit` from 3.6.0 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.6.0...v4.6.2) Updates `isort` from 5.13.2 to 9.0.2 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@5.13.2...9.0.2) --- updated-dependencies: - dependency-name: faker dependency-version: 40.39.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: isort dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors ... Signed-off-by: dependabot[bot] <[email protected]>
ca79875 to
3193727
Compare
PR Check Results✅ Code Formatting: Passed |
Bumps the pip-root-majors group with 6 updates in the / directory:
23.2.040.43.05.0.18.1.05.9.87.2.21.8.02.4.03.6.04.6.25.13.29.0.2Updates
fakerfrom 23.2.0 to 40.43.0Release notes
Sourced from faker's releases.
... (truncated)
Changelog
Sourced from faker's changelog.
... (truncated)
Commits
df289bfBump version: 40.42.0 → 40.43.07593afa📝 Update CHANGELOG.md4d178feAdd es_CO internet provider (#2455)d4861a9Add es_CO bank provider (#2453)a4563c8Bump version: 40.41.0 → 40.42.0db94c7b📝 Update CHANGELOG.mda832d8bCatch NotImplementedError in Documentor.get_provider_formatters (#2462)06db7ebCatch NotImplementedError when documenting unimplemented formatters (#2461)e9b9ae8fix(fa_IR, mk_MK): generate IBANs with the correct BBAN length (#2451)72e2fa4Bump version: 40.40.0 → 40.41.0Updates
redisfrom 5.0.1 to 8.1.0Release notes
Sourced from redis's releases.
... (truncated)
Commits
e013126Testing with 8.10 GA (#4227)059d1e9Fixed TS.NRANGE commands to correctly apply aggregators (#4225)d486a0aFix FIELDNAME alias dropping first character of un-prefixed fields (#4224)fb93104feat: add client-side HIMPORT fieldset support for standalone and cluster cli...9197609Fix lat/lon swap in search querystring geo() helper (#4223)14714a0fix: Fixed double decoding issue with unquote() (#4222)227280aUpdate lib version to 8.1.088d16d0Decode ACL LOG string values on the default RESP3 legacy callback (#4201)599fd75feat: add FT.ALIASLIST support (#4198)71e275etest: add VectorField RERANK serialization tests for sync and async search (#...Updates
psutilfrom 5.9.8 to 7.2.2Changelog
Sourced from psutil's changelog.
... (truncated)
Commits
9eea97dPre-release938ac64Rm sphinxcontrib.googleanalytics; override layout.html9dcbb7eAdd sphinxcontrib-googleanalytics to requirements.txt76eaf9aTry to add google analytics to docde1cafaUpdate doc mentioning Process.wait() internal detailsbb30943Refact can_use_pidfd_open() and can_use_kqueue()a571717#2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)8b98c3ePre-release700b7e6[macOS] fix potential leaks in error paths (#2707)7cc7923Windows / cmdline(): be more defensive in free()ing in case of errorUpdates
mypyfrom 1.8.0 to 2.4.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
935ba8aBump version to 2.4.0334a678Add link for PR 22066 in mypy 2.4 changelog (#22082)fe69660Finalize mypy 2.4 changelog (#22080)541fd87Various mypy 2.4 changelog updates (#22077)b231182Update native parser docs (#22078)04fe42cInitial Changelog for Mypy 2.4 (#22071)0617494Quick fix for non UTF-8 encodings with new parser (#22066)b2f9b60Bump librt to 0.16.0 (#22067)9d798dcSync typeshed (#22054)0861bb6Reduce max protocol stack size to 20 (#22053)Updates
pre-commitfrom 3.6.0 to 4.6.2Release notes
Sourced from pre-commit's releases.
... (truncated)
Changelog
Sourced from pre-commit's changelog.
... (truncated)
Commits
9767b6cv4.6.242ee3ffMerge pull request #3743 from pre-commit/npm-build-scripts-11-x3056619fixlanguage: nodefor hooks with build scripts and npm 11.x242ce8av4.6.1766e550Merge pull request #3727 from pre-commit/dedupe1558d06Merge pull request #3726 from pre-commit/exists-faster8a1c47aavoid duplicate files in --all-files during conflict2e01c99faster check of rev existing locally as a commit3613bf2Merge pull request #3701 from pre-commit/autoupdate-repos1d811d9Return an error for invalid --repoUpdates
isortfrom 5.13.2 to 9.0.2Release notes
Sourced from isort's releases.
... (truncated)
Changelog
Sourced from isort's changelog.
... (truncated)
Commits
9f90561Core developers revision4371472Fix a "security" issuee74b4baDo some formatting and setting updates539abb1Bump the uv group with 15 updates0482160Fully type checktestsand modernize codebbda474Bump pypa/cibuildwheel from 4.2.0 to 4.2.1 in the github-actions group1fd0701Agent Host changes for agents/dependabot-monthly-updates-uv6911091Always split onparsed.line_separator3808b70Keep CRLF regression cases beside existing check-mode tests3202ce8Preserve CRLF blank lines during float-to-top preprocessing