search

nvuillam / github-dependents-info

Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badge
https://pypi.org/project/github-dependents-info/
MIT License
90 stars 6 forks source link

:arrow_up: Bump marshmallow from 3.20.2 to 3.21.0 #565

Open dependabot[bot] opened 4 months ago

dependabot[bot] commented 4 months ago

Bumps marshmallow from 3.20.2 to 3.21.0.

Changelog

Sourced from marshmallow's changelog.

3.21.0 (2024-02-26)

Bug fixes:

  • Fix validation of URL fields to allow missing user field, per NWG RFC 3986 (:issue:2232). Thanks :user:ddennerline3 for reporting and :user:deckar01 for the PR.

Other changes:

  • Backwards-incompatible: __version__, __parsed_version__, and __version_info__ attributes are deprecated (:issue:2227). Use feature detection or importlib.metadata.version("marshmallow") instead.
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
github-actions[bot] commented 4 months ago

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
⚠️ ACTION actionlint 4 3 0.06s
✅ COPYPASTE jscpd yes no 2.18s
⚠️ DOCKERFILE hadolint 2 1 0.29s
✅ JSON eslint-plugin-jsonc 3 0 0 1.44s
✅ JSON jsonlint 3 0 0.23s
✅ JSON prettier 3 0 0 0.71s
✅ JSON v8r 3 0 4.07s
⚠️ MAKEFILE checkmake 1 1 0.0s
⚠️ MARKDOWN markdownlint 12 0 18 1.47s
✅ MARKDOWN markdown-table-formatter 12 1 0 0.37s
✅ PYTHON bandit 6 0 0.86s
✅ PYTHON black 6 0 0 1.02s
✅ PYTHON flake8 6 0 0.53s
✅ PYTHON isort 6 0 0 0.3s
⚠️ PYTHON mypy 6 5 8.92s
✅ PYTHON pylint 6 0 3.93s
⚠️ PYTHON pyright 6 8 9.5s
✅ PYTHON ruff 6 0 0 0.03s
✅ REPOSITORY checkov yes no 12.27s
✅ REPOSITORY gitleaks yes no 2.67s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 11.89s
✅ REPOSITORY secretlint yes no 1.15s
✅ REPOSITORY trivy yes no 5.97s
✅ REPOSITORY trivy-sbom yes no 2.09s
✅ REPOSITORY trufflehog yes no 4.33s
✅ SPELL cspell 47 0 5.48s
✅ SPELL lychee 29 0 0.82s
✅ YAML prettier 14 0 0 1.42s
✅ YAML v8r 14 0 18.5s
✅ YAML yamllint 14 0 0.5s

See detailed report in MegaLinter reports

_MegaLinter is graciously provided by OX Security_

github-actions[bot] commented 4 months ago

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
⚠️ ACTION actionlint 4 3 0.07s
✅ COPYPASTE jscpd yes no 2.03s
⚠️ DOCKERFILE hadolint 2 1 0.12s
✅ JSON eslint-plugin-jsonc 3 0 0 1.4s
✅ JSON jsonlint 3 0 0.29s
✅ JSON prettier 3 0 0 0.68s
✅ JSON v8r 3 0 3.93s
⚠️ MAKEFILE checkmake 1 1 0.0s
⚠️ MARKDOWN markdownlint 12 0 18 1.42s
✅ MARKDOWN markdown-table-formatter 12 1 0 0.39s
✅ PYTHON bandit 6 0 1.0s
✅ PYTHON black 6 0 0 1.19s
✅ PYTHON flake8 6 0 0.51s
✅ PYTHON isort 6 0 0 0.32s
⚠️ PYTHON mypy 6 5 9.28s
✅ PYTHON pylint 6 0 3.91s
⚠️ PYTHON pyright 6 8 10.26s
✅ PYTHON ruff 6 0 0 0.03s
✅ REPOSITORY checkov yes no 11.54s
✅ REPOSITORY gitleaks yes no 2.35s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 12.19s
✅ REPOSITORY secretlint yes no 1.16s
✅ REPOSITORY trivy yes no 6.13s
✅ REPOSITORY trivy-sbom yes no 2.17s
✅ REPOSITORY trufflehog yes no 4.07s
✅ SPELL cspell 47 0 5.16s
✅ SPELL lychee 29 0 0.89s
✅ YAML prettier 14 0 0 1.4s
✅ YAML v8r 14 0 18.45s
✅ YAML yamllint 14 0 0.44s

See detailed report in MegaLinter reports

_MegaLinter is graciously provided by OX Security_

dependabot[bot] commented 4 months ago

A newer version of marshmallow exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.