hackariens / django

Templates pour la création d'un nouveau projet django
2 stars 0 forks source link

chore(deps): update dependency sqlparse to v0.4.2 - autoclosed #80

Closed renovate[bot] closed 3 years ago

renovate[bot] commented 3 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
sqlparse (changelog) ==0.4.1 -> ==0.4.2 age adoption passing confidence

Release Notes

andialbrecht/sqlparse ### [`v0.4.2`](https://togithub.com/andialbrecht/sqlparse/blob/master/CHANGELOG#Release-042-Sep-10-2021) [Compare Source](https://togithub.com/andialbrecht/sqlparse/compare/0.4.1...0.4.2) Notable Changes - IMPORTANT: This release fixes a security vulnerability in the strip comments filter. In this filter a regular expression that was vulnerable to ReDOS (Regular Expression Denial of Service) was used. See the security advisory for details: https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf The vulnerability was discovered by [@​erik-krogh](https://togithub.com/erik-krogh) and [@​yoff](https://togithub.com/yoff) from GitHub Security Lab (GHSL). Thanks for reporting! Enhancements - Add ELSIF as keyword (issue584). - Add CONFLICT and ON_ERROR_STOP keywords (pr595, by j-martin). Bug Fixes - Fix parsing of backticks (issue588). - Fix parsing of scientific number (issue399).

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by WhiteSource Renovate. View repository job log here.