-
Notifications
You must be signed in to change notification settings - Fork 32
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: Update dependency pygments to v2.15.0 [SECURITY] #104
Open
renovate
wants to merge
1
commit into
master
Choose a base branch
from
renovate/pypi-pygments-vulnerability
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 1, 2024 14:38
1eec39e
to
f8ea491
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.17.2 [SECURITY]
May 1, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 1, 2024 16:46
f8ea491
to
85b2abf
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.17.2 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
May 1, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 9, 2024 08:47
85b2abf
to
9329f3d
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.18.0 [SECURITY]
May 9, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 9, 2024 10:16
9329f3d
to
217ed5b
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.18.0 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
May 9, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 15, 2024 17:14
217ed5b
to
1ddd5f7
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.18.0 [SECURITY]
May 15, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
May 16, 2024 00:42
1ddd5f7
to
21576f7
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.18.0 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
May 16, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
June 27, 2024 11:10
21576f7
to
6dd923e
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.18.0 [SECURITY]
Jun 27, 2024
renovate
bot
changed the title
chore: Update dependency pygments to v2.18.0 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
Jun 27, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
June 27, 2024 14:25
6dd923e
to
bc27e81
Compare
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
July 14, 2024 08:01
bc27e81
to
04fd399
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.18.0 [SECURITY]
Jul 14, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
July 14, 2024 11:56
04fd399
to
dea5e30
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.18.0 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
Jul 14, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
July 28, 2024 14:31
dea5e30
to
0e9ea1a
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.15.0 [SECURITY]
chore: Update dependency pygments to v2.18.0 [SECURITY]
Jul 28, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
July 28, 2024 17:12
0e9ea1a
to
bf5102a
Compare
renovate
bot
changed the title
chore: Update dependency pygments to v2.18.0 [SECURITY]
chore: Update dependency pygments to v2.15.0 [SECURITY]
Jul 28, 2024
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
August 6, 2024 16:13
bf5102a
to
d2e6cef
Compare
renovate
bot
force-pushed
the
renovate/pypi-pygments-vulnerability
branch
from
August 7, 2024 12:53
d2e6cef
to
7f263f9
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==2.13.0
->==2.15.0
GitHub Vulnerability Alerts
CVE-2022-40896
A ReDoS issue was discovered in
pygments/lexers/smithy.py
in Pygments until 2.15.0 via SmithyLexer.Release Notes
pygments/pygments (pygments)
v2.15.0
Compare Source
(released April 10th, 2023)
Added lexers:
Updated lexers:
AMDGPU: Add support for
scratch_
instructions, theattr*.*
argument,as well as the
off
modifier (#2327).APDL: Miscellaneous improvements (#2314)
bash/tcsh:
break
to keywords (#2377)Chapel: Support attributes (#2376)
CMake: Implement bracket style comments (#2338, #2354)
CSS: Improve lexing of numbers inside function calls (#2382, #2383)
diff: Support normal diff syntax, as opposed to unified diff syntax (#2321)
GLSL, HLSL:
LilyPond: minor update of builtins
PHP: support attributes (#2055, #2347, #2360), fix anonymous classes without
parameters (#2359), improve lexing of variable variable syntax (#2358)
Python:
None
(#2406)Rebol/Red: Don't require script headers (#2348, #2349)
Spice: Update keywords (#2336)
SQL+Jinja (
analyse_text
method): Fix catastrophic backtracking (#2355)Terraform: Add
hcl
alias (#2375)Declare support for Python 3.11 and drop support for Python 3.6 (#2324).
Update
native
style to improve contrast (#2325).Update `github-dark`` style to match latest Primer style (#2401)
Revert a change that made guessing lexers based on file names slower
on Python 3.10 and older (#2328).
Fix some places where a locale-dependent encoding could unintentionally
be used instead of UTF-8 (#2326).
Fix Python traceback handling (#2226, #2329).
Groff formatter: sort color definitions for reproducibility (#2343)
Move project metadata to
pyproject.toml
, removesetup.py
and
setup.cfg
(#2342)The top-level
Makefile
has been removed. Instead, all shortcutsfor developing are now defined and run through tox. The
doc
folderstill contains a
Makefile
as an alternative totox -e doc
.v2.14.0
Compare Source
(released January 1st, 2023)
Added lexers:
Updated lexers:
Abap: Update keywords (#2281)
Alloy: Update for Alloy 6 (#1963)
C family (C, C++ and many others):
definition due to braces in comments (#2210)
C#: Fix number and operator recognition (#2256, #2257)
CSound: Updated builtins (#2268)
F#: Add
.fsx
file extension (#2282)gas (GNU assembler): recognize braces as punctuation (#2230)
HTTP: Add
CONNECT
keyword (#2242)Inform 6: Fix lexing of properties and doubles (#2214)
INI: Allow comments that are not their own line (#2217, #2161)
Java properties: Fix issue with whitespace-delimited keys, support
comments starting with
!
and escapes, no longer support undocumented;
and//
comments (#2241)LilyPond: Improve heuristics, add
\maxima
duration (#2283)LLVM: Add opaque pointer type (#2269)
Macaulay2: Update keywords (#2305)
Minecraft-related lexers (SNB and Minecraft function) moved to
pygments.lexers.minecraft
(#2276)Nim: General improvements (#1970)
Nix: Fix single quotes inside indented strings (#2289)
Objective J: Fix catastrophic backtracking (#2225)
NASM: Add support for SSE/AVX/AVX-512 registers as well as 'rel'
and 'abs' address operators (#2212)
Powershell:
local:
keyword (#2254)Solidity: Add boolean operators (#2292)
Spice: Add
enum
keyword and fix a bug regarding binary,hexadecimal and octal number tokens (#2227)
YAML: Accept colons in key names (#2277)
Fix
make mapfiles
when Pygments is not installed in editable mode(#2223)
Support more filetypes and compression types in
autopygmentize
(#2219)Merge consecutive tokens in Autohotkey, Clay (#2248)
Add
.nasm
as a recognized file type for NASM (#2280)Add
*Spec.hs
as a recognized file type forHSpec
(#2308)Add
*.pyi
(for typing stub files) as a recognized file type forPython (#2231)
The HTML lexer no longer emits empty spans for whitespace (#2304)
Fix
IRCFormatter
inserting linenumbers incorrectly (#2270)Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.