Skip to content
Snippets Groups Projects

Bump py from 1.9.0 to 1.10.0

Merged WKDV Bot requested to merge dependabot/pip/py-1.10.0 into develop

Bumps py from 1.9.0 to 1.10.0.

Changelog

Sourced from py's changelog.

1.10.0 (2020-12-12)

  • Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality (CVE-2020-29651)
  • Update vendored apipkg: 1.4 => 1.5
  • Update vendored iniconfig: 1.0.0 => 1.1.1
Commits
  • e5ff378 Update CHANGELOG for 1.10.0
  • 94cf44f Update vendored libs
  • 5e8ded5 testing: comment out an assert which fails on Python 3.9 for now
  • afdffcc Rename HOWTORELEASE.rst to RELEASING.rst
  • 2de53a6 Merge pull request #266 from nicoddemus/gh-actions
  • fa1b32e Merge pull request #264 from hugovk/patch-2
  • 887d6b8 Skip test_samefile_symlink on pypy3 on Windows
  • e94e670 Fix test_comments() in test_source
  • fef9a32 Adapt test
  • 4a694b0 Add GitHub Actions badge to README
  • Additional commits viewable in compare view

Merge request reports

Pipeline #13054 passed

Pipeline passed for 90501dad on dependabot/pip/py-1.10.0

Approval is optional

Merged by David SchäferDavid Schäfer 4 years ago (Jan 1, 2021 4:20pm UTC)

Merge details

  • Changes merged into with 4428da11.
  • Deleted the source branch.
  • Auto-merge enabled

Pipeline #13091 canceled

Pipeline canceled for 4428da11 on develop

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
Please register or sign in to reply
Loading