In an attempt to address a CVE (CVE-2022-34749) for one of our docs dependencies, mistune, I found multiple issues. The first is that we cannot address the CVE until some Sphinx API issues are solved in upstream Sphinx. The second issue is that our docs building is broken, presumably by the update to Python 3.7 as some regexs from rinohtype were failing to compile. This work fixes the docs build and also updates the documentation for completeness.
m2r2, which requires mistune, was having us install the newer version of mistune that breaks against the Sphinx API, so we have to update m2r2 to use a version that pins against the older mistune.
Description
In an attempt to address a CVE (CVE-2022-34749) for one of our docs dependencies,
mistune
, I found multiple issues. The first is that we cannot address the CVE until some Sphinx API issues are solved in upstream Sphinx. The second issue is that our docs building is broken, presumably by the update to Python 3.7 as some regexs fromrinohtype
were failing to compile. This work fixes the docs build and also updates the documentation for completeness.m2r2
, which requiresmistune
, was having us install the newer version ofmistune
that breaks against the Sphinx API, so we have to updatem2r2
to use a version that pins against the oldermistune
.This change is![Reviewable](https://reviewable.io/review_button.svg)