ossf / security-reviews

A community collection of security reviews of open source software components.
https://openssf.org
92 stars 26 forks source link

Bump packageurl-python from 0.11.2 to 0.13.3 #98

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 10 months ago

Bumps packageurl-python from 0.11.2 to 0.13.3.

Release notes

Sourced from packageurl-python's releases.

v0.13.3

No release notes provided.

v0.13.2

No release notes provided.

v0.13.1

No release notes provided.

v0.13.0

No release notes provided.

v0.12.0

No release notes provided.

v0.11.3

What's Changed

Full Changelog: https://github.com/package-url/packageurl-python/compare/v0.11.2...v0.11.3

Changelog

Sourced from packageurl-python's changelog.

0.13.3 (2024-01-04)

0.13.2 (2024-01-04)

0.13.1 (2023-12-11)

0.13.0 (2023-12-08)

  • Revert changes from package-url/packageurl-python#115 In above PR we dropped namespaces for a golang purl and stored whole namespace and name in name itself, which was further discussed again and decided we will like to keep namespace back.

0.12.0 (2023-12-08)

0.11.3 (2023-12-08)

Commits
  • ca1e7e3 Improve support for SourceForge URLs in url2purl #139
  • 944171e Improve support for SourceForge URLs in url2purl #139
  • a6a3211 Bump version for v0.13.1 release
  • 9a67e2c Change changelog for v0.13.0 (#138)
  • b820e15 Add support for Python 3.12 (#135)
  • 307e4b4 Revert changes from #115 (#136)
  • 9624479 Simplified way to set the VERSION for tagging
  • be33d72 Create the GH release proper instead of a draft
  • 3d1eff0 Bump version to 0.12.0 for release
  • 57e8a42 Add missing test for gitlab purls for purl2url #124
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 10 months ago

Superseded by #99.