Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update maintenance #176

Merged
merged 1 commit into from
May 7, 2024
Merged

Update maintenance #176

merged 1 commit into from
May 7, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 7, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/dependency-review-action action minor v4.2.5 -> v4.3.2 age adoption passing confidence
black (changelog) patch ==24.4.1 -> ==24.4.2 age adoption passing confidence
filelock minor ==3.13.4 -> ==3.14.0 age adoption passing confidence
pypa/gh-action-pypi-publish action digest 81e9d93 -> 3fbcf7c
step-security/harden-runner action patch v2.7.0 -> v2.7.1 age adoption passing confidence
tox (changelog) minor ==4.14.2 -> ==4.15.0 age adoption passing confidence
virtualenv patch ==20.26.0 -> ==20.26.1 age adoption passing confidence

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.3.2

Compare Source

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.1...v4.3.2

v4.3.1

Compare Source

What's Changed

This release fixes some bugs related to package-url parsing that were introduced in 4.3.0. See https://github.com/actions/dependency-review-action/pull/753.

Full Changelog: actions/dependency-review-action@V4.3.0...v4.3.1

v4.3.0

Compare Source

New Features

  • The deny-packages option can now be used without a version number to exclude all versions of a package.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.2.5...V4.3.0

psf/black (black)

v24.4.2

Compare Source

This is a bugfix release to fix two regressions in the new f-string parser introduced in
24.4.1.

Parser
  • Fix regression where certain complex f-strings failed to parse (#​4332)
Performance
  • Fix bad performance on certain complex string literals (#​4331)
tox-dev/py-filelock (filelock)

v3.14.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.13.4...3.14.0

step-security/harden-runner (step-security/harden-runner)

v2.7.1

Compare Source

What's Changed

Release v2.7.1 by @​varunsh-coder, @​h0x0er, @​ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

  • Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
  • Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
  • Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1

tox-dev/tox (tox)

v4.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.14.2...4.15.0

pypa/virtualenv (virtualenv)

v20.26.1

Compare Source


Configuration

📅 Schedule: Branch creation - "every month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@svenklemm svenklemm merged commit f18f07c into main May 7, 2024
4 of 5 checks passed
@svenklemm svenklemm deleted the renovate/maintenance branch May 7, 2024 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants