Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Dependencies #839

Merged
merged 2 commits into from
Sep 11, 2024
Merged

Update Dependencies #839

merged 2 commits into from
Sep 11, 2024

Conversation

reweeden
Copy link
Contributor

@reweeden reweeden commented Sep 9, 2024

No description provided.

@mckadesorensen
Copy link
Contributor

mckadesorensen commented Sep 10, 2024 •
edited
Loading

Looks like these updates are failing some checks. Other than that, the code updates look good.

@reweeden
Copy link
Contributor Author

reweeden commented Sep 11, 2024 •
edited
Loading

Looks like these updates are failing some checks. Other than that, the code updates look good.

It's just vulnerability scanner noise. Pyup complains that the latest version of Jinja2 has a "vulnerability", at the same time:

NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Not to mention the fact that we're not using it in this way.

@reweeden reweeden merged commit ea53862 into devel Sep 11, 2024
8 of 10 checks passed
@reweeden reweeden deleted the rew/update-dependencies branch September 11, 2024 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@gjclark gjclark gjclark approved these changes

@mckadesorensen mckadesorensen mckadesorensen approved these changes

@mattp0 mattp0 Awaiting requested review from mattp0

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@reweeden @mckadesorensen @gjclark