Closed dependabot[bot] closed 2 months ago
Benchmark is done. Checkout the benchmark result page. Benchmark differences below 5% might be due to CI noise.
@dependabot rebase
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
Bumps asteval from 0.9.33 to 1.0.1.
Release notes
Sourced from asteval's releases.
Commits
c673c8b
update doc to describe audit by IBM security research groupd85e7cb
remove numpy modules polynomial, fft, linalg by default for security concerns1b453ec
disallow string.format(), improve security of f-string evaluation633bdc4
update docsc6499a6
Update README.rstc70824d
fix pyproject.toml1139cc6
using pyproject.toml without setup.cfg, updated README, cleanup8e4b790
Merge pull request #128 from lmfit/codecov_work360e0a6
update codecov yml0ebd66e
remove Python 3.8 deprecated nodes, namesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show