Skip to content

Commit

Permalink
Fix CVE
Browse files Browse the repository at this point in the history
    Upgrade black@22.8.0 to black@24.3.0 to fix
    ✗ Regular Expression Denial of Service (ReDoS) (new) [Medium Severity][https://security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273] in black@22.8.0
      introduced by black@22.8.0
  • Loading branch information
sbrunner committed Mar 19, 2024
1 parent f4b7a4c commit 3e79b72
Show file tree
Hide file tree
Showing 7 changed files with 121 additions and 104 deletions.
18 changes: 10 additions & 8 deletions c2cciutils/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -214,14 +214,16 @@ def get_config(branch: Optional[str] = None) -> c2cciutils.configuration.Configu
else {}
),
},
"versions": {
"extra_versions": [master_branch],
"backport_labels": True,
"audit": True,
"branches": True,
}
if based_on_master
else False,
"versions": (
{
"extra_versions": [master_branch],
"backport_labels": True,
"audit": True,
"branches": True,
}
if based_on_master
else False
),
"black": True,
"isort": True,
"codespell": True,
Expand Down
1 change: 0 additions & 1 deletion c2cciutils/applications_definition.py
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
Automatically generated file from a JSON schema.
"""


from typing import Dict, List, Literal, TypedDict, Union

# Application configuration
Expand Down
1 change: 0 additions & 1 deletion c2cciutils/configuration.py
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
Automatically generated file from a JSON schema.
"""


from typing import Any, Dict, List, Literal, TypedDict, Union

# Audit
Expand Down
1 change: 1 addition & 0 deletions c2cciutils/lib/docker.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
"""
Some utility functions for Docker images.
"""

import os
import subprocess # nosec: B404
from typing import Dict, Optional, Tuple, cast
Expand Down
1 change: 1 addition & 0 deletions c2cciutils/pr_checks.py
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
Commits, messages and labels.
"""

import os
import re
import subprocess # nosec
Expand Down
199 changes: 107 additions & 92 deletions poetry.lock

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ jsonschema = "4.16.0"
jsonschema-gentypes = "1.3.2"
node-vm2 = "0.4.5"
defusedxml = "0.7.1"
black = { version = "22.8.0", optional = true }
black = { version = "24.3.0", optional = true }
click = "8.1.7"
isort = { version = "5.10.1", optional = true }
twine = { version = "4.0.2", optional = true }
Expand Down Expand Up @@ -131,7 +131,7 @@ publish = [
pr_checks = ["codespell"]

[tool.poetry.dev-dependencies]
prospector = { version = "1.7.7", extras = ["with_bandit", "with_mypy", "with_pyroma"] }
prospector = { version = "1.9.0", extras = ["with_bandit", "with_mypy", "with_pyroma"] }
types-requests = "2.28.11.17"
types-pyyaml = "6.0.12.12"
types-setuptools = "65.3.0"
Expand Down

0 comments on commit 3e79b72

Please sign in to comment.