JuryA / landscape_api_py3

Client for the Landscape API (Python 3)
https://landscape-api-py3.readthedocs.io/
MIT License
2 stars 3 forks source link

chore(deps): update dependency black to v24 [security] #814

Open renovate[bot] opened 6 months ago

renovate[bot] commented 6 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
black ==22.8.0 -> ==24.3.0 age adoption passing confidence
black ==22.10.0 -> ==24.3.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.


Configuration

πŸ“… Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

β™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about these updates again.



This PR was generated by Mend Renovate. View the repository job log.

what-the-diff[bot] commented 6 months ago

PR Summary

codecov[bot] commented 6 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 33.67%. Comparing base (ad09368) to head (b52b703).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #814 +/- ## ======================================= Coverage 33.67% 33.67% ======================================= Files 5 5 Lines 677 677 ======================================= Hits 228 228 Misses 449 449 ``` | [Flag](https://app.codecov.io/gh/JuryA/landscape_api_py3/pull/814/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Ji%C5%99%C3%AD+Altman) | Coverage Ξ” | | |---|---|---| | [unittests](https://app.codecov.io/gh/JuryA/landscape_api_py3/pull/814/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Ji%C5%99%C3%AD+Altman) | `33.67% <ΓΈ> (ΓΈ)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Ji%C5%99%C3%AD+Altman#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.