search

conda-incubator / conda-store

Data science environments, for collaboration. ✨
https://conda.store
BSD 3-Clause "New" or "Revised" License
149 stars 50 forks source link

Bump pyyaml from 5.3.1 to 5.4 in /conda-store-server #918

Closed dependabot[bot] closed 4 weeks ago

dependabot[bot] commented 4 weeks ago

Bumps pyyaml from 5.3.1 to 5.4.

Changelog

Sourced from pyyaml's changelog.

5.4 (2021-01-19)

Commits
  • 58d0cb7 5.4 release
  • a60f7a1 Fix compatibility with Jython
  • ee98abd Run CI on PR base branch changes
  • ddf2033 constructor.timezone: _copy & deepcopy
  • fc914d5 Avoid repeatedly appending to yaml_implicit_resolvers
  • a001f27 Fix for CVE-2020-14343
  • fe15062 Add 3.9 to appveyor file for completeness sake
  • 1e1c7fb Add a newline character to end of pyproject.toml
  • 0b6b7d6 Start sentences and phrases for capital letters
  • c976915 Shell code improvements
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/conda-incubator/conda-store/network/alerts).
netlify[bot] commented 4 weeks ago

Deploy Preview for conda-store canceled.

Name Link
Latest commit 42ac171b64fcb4087e4cad5db3c3d0cda31ce646
Latest deploy log https://app.netlify.com/sites/conda-store/deploys/671acda8c0362000094881a2
peytondmurray commented 4 weeks ago

@dependabot ignore

dependabot[bot] commented 4 weeks ago

Sorry, the command you entered is not valid for this pull request. Please check the syntax and try again.

Valid commands: For single dependency PRs, use commands like: @dependabot ignore this major version @dependabot ignore this minor version @dependabot ignore this dependency

peytondmurray commented 4 weeks ago

@dependabot ignore this dependency

dependabot[bot] commented 4 weeks ago

OK, I won't notify you about pyyaml again, unless you re-open this PR.

peytondmurray commented 4 weeks ago

@dependabot ignore this major version

dependabot[bot] commented 4 weeks ago

OK, I won't notify you about version 5.x.x again, unless you re-open this PR.