dependabot[bot]
3f449f3c0f
build(deps-dev): bump isort from 5.11.4 to 5.13.0 ( #1900 )
...
Bumps [isort](https://github.com/pycqa/isort ) from 5.11.4 to 5.13.0.
- [Release notes](https://github.com/pycqa/isort/releases )
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pycqa/isort/compare/5.11.4...5.13.0 )
---
updated-dependencies:
- dependency-name: isort
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 15:56:24 +01:00
dependabot[bot]
51b63b465b
build(deps-dev): bump ruff from 0.1.6 to 0.1.7 ( #1902 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.6 to 0.1.7.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.6...v0.1.7 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 15:56:16 +01:00
dependabot[bot]
afb3426e96
build(deps-dev): bump pyinstaller from 6.2.0 to 6.3.0 ( #1901 )
...
Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases )
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst )
- [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.2.0...v6.3.0 )
---
updated-dependencies:
- dependency-name: pyinstaller
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 15:56:04 +01:00
dependabot[bot]
c8d0071443
build(deps-dev): bump flake8-encodings from 0.5.0.post1 to 0.5.1
...
Bumps [flake8-encodings](https://github.com/python-formate/flake8-encodings ) from 0.5.0.post1 to 0.5.1.
- [Release notes](https://github.com/python-formate/flake8-encodings/releases )
- [Commits](https://github.com/python-formate/flake8-encodings/compare/v0.5.0.post1...v0.5.1 )
---
updated-dependencies:
- dependency-name: flake8-encodings
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-28 12:37:42 +00:00
Willi Ballenthin
e6b8a3e505
Merge pull request #1870 from mandiant/dependabot/pip/wcwidth-0.2.12
...
build(deps-dev): bump wcwidth from 0.2.10 to 0.2.12
2023-11-28 12:37:16 +00:00
Willi Ballenthin
f328df1bc4
Merge pull request #1871 from mandiant/dependabot/pip/setuptools-69.0.2
...
build(deps-dev): bump setuptools from 68.0.0 to 69.0.2
2023-11-28 12:37:06 +00:00
Willi Ballenthin
d1aa1557b2
Merge pull request #1872 from mandiant/dependabot/pip/flake8-bugbear-23.11.26
...
build(deps-dev): bump flake8-bugbear from 23.9.16 to 23.11.26
2023-11-28 12:36:58 +00:00
dependabot[bot]
84ed6c8d24
build(deps-dev): bump mypy from 1.7.0 to 1.7.1
...
Bumps [mypy](https://github.com/python/mypy ) from 1.7.0 to 1.7.1.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v1.7.0...v1.7.1 )
---
updated-dependencies:
- dependency-name: mypy
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-27 14:56:45 +00:00
dependabot[bot]
61c8e30f65
build(deps-dev): bump flake8-bugbear from 23.9.16 to 23.11.26
...
Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear ) from 23.9.16 to 23.11.26.
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases )
- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.9.16...23.11.26 )
---
updated-dependencies:
- dependency-name: flake8-bugbear
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-27 14:56:29 +00:00
dependabot[bot]
6a4994f1ef
build(deps-dev): bump setuptools from 68.0.0 to 69.0.2
...
Bumps [setuptools](https://github.com/pypa/setuptools ) from 68.0.0 to 69.0.2.
- [Release notes](https://github.com/pypa/setuptools/releases )
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst )
- [Commits](https://github.com/pypa/setuptools/compare/v68.0.0...v69.0.2 )
---
updated-dependencies:
- dependency-name: setuptools
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-27 14:56:01 +00:00
dependabot[bot]
fce105060d
build(deps-dev): bump wcwidth from 0.2.10 to 0.2.12
...
Bumps [wcwidth](https://github.com/jquast/wcwidth ) from 0.2.10 to 0.2.12.
- [Release notes](https://github.com/jquast/wcwidth/releases )
- [Commits](https://github.com/jquast/wcwidth/compare/0.2.10...0.2.12 )
---
updated-dependencies:
- dependency-name: wcwidth
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-27 14:55:45 +00:00
Moritz
f763d14266
Merge pull request #1862 from mandiant/dependabot/pip/wcwidth-0.2.10
...
build(deps-dev): bump wcwidth from 0.2.9 to 0.2.10
2023-11-23 12:28:16 +01:00
dependabot[bot]
cf35d2c497
build(deps-dev): bump wcwidth from 0.2.9 to 0.2.10
...
Bumps [wcwidth](https://github.com/jquast/wcwidth ) from 0.2.9 to 0.2.10.
- [Release notes](https://github.com/jquast/wcwidth/releases )
- [Commits](https://github.com/jquast/wcwidth/compare/0.2.9...0.2.10 )
---
updated-dependencies:
- dependency-name: wcwidth
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-20 14:20:59 +00:00
dependabot[bot]
f6048b9e99
build(deps-dev): bump ruff from 0.1.5 to 0.1.6
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.5 to 0.1.6.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.5...v0.1.6 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-20 14:20:47 +00:00
doomedraven
490271e50b
fix pydantic vuln (ReDoS)
...
Regular Expression Denial of Service (ReDoS)
MEDIUM SEVERITY
Package Manager: pip
Vulnerable module: pydantic
Remediation
Upgrade pydantic to version 1.10.13, 2.4.0 or higher.
2023-11-16 10:54:59 +01:00
Willi Ballenthin
210a13d94e
Merge pull request #1850 from mandiant/dependabot/pip/mypy-1.7.0
...
build(deps-dev): bump mypy from 1.6.1 to 1.7.0
2023-11-14 11:29:59 +01:00
dependabot[bot]
0d5ff45c76
build(deps-dev): bump mypy from 1.6.1 to 1.7.0
...
Bumps [mypy](https://github.com/python/mypy ) from 1.6.1 to 1.7.0.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v1.6.1...v1.7.0 )
---
updated-dependencies:
- dependency-name: mypy
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-14 10:29:20 +00:00
dependabot[bot]
3c9ab63521
build(deps-dev): bump black from 23.10.1 to 23.11.0
...
Bumps [black](https://github.com/psf/black ) from 23.10.1 to 23.11.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/23.10.1...23.11.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-14 10:29:05 +00:00
Willi Ballenthin
a2fde921aa
Merge pull request #1848 from mandiant/dependabot/pip/ruff-0.1.5
...
build(deps-dev): bump ruff from 0.1.4 to 0.1.5
2023-11-14 11:28:25 +01:00
dependabot[bot]
f0f95824ac
build(deps-dev): bump ruff from 0.1.4 to 0.1.5
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.4 to 0.1.5.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.4...v0.1.5 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-13 14:21:13 +00:00
dependabot[bot]
0ba5c23847
build(deps-dev): bump pyinstaller from 6.1.0 to 6.2.0
...
Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases )
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst )
- [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.1.0...v6.2.0 )
---
updated-dependencies:
- dependency-name: pyinstaller
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-13 14:20:52 +00:00
Moritz
74f70856a6
Merge pull request #1840 from mandiant/dependabot/pip/wcwidth-0.2.9
...
build(deps-dev): bump wcwidth from 0.2.8 to 0.2.9
2023-11-08 15:38:27 +01:00
Moritz
e5b7ee96fc
Merge pull request #1839 from mandiant/dependabot/pip/black-23.10.1
...
build(deps-dev): bump black from 23.10.0 to 23.10.1
2023-11-08 15:38:02 +01:00
Moritz
92d43f5327
Merge pull request #1838 from mandiant/dependabot/pip/ruamel-yaml-0.18.5
...
build(deps-dev): bump ruamel-yaml from 0.18.3 to 0.18.5
2023-11-08 15:37:31 +01:00
dependabot[bot]
48abd297a8
build(deps-dev): bump black from 23.10.0 to 23.10.1
...
Bumps [black](https://github.com/psf/black ) from 23.10.0 to 23.10.1.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/23.10.0...23.10.1 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-07 13:16:09 +00:00
dependabot[bot]
abf83fe8cf
build(deps-dev): bump ruff from 0.0.291 to 0.1.4
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.0.291 to 0.1.4.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.0.291...v0.1.4 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-06 14:42:18 +00:00
dependabot[bot]
6380d936ae
build(deps-dev): bump wcwidth from 0.2.8 to 0.2.9
...
Bumps [wcwidth](https://github.com/jquast/wcwidth ) from 0.2.8 to 0.2.9.
- [Release notes](https://github.com/jquast/wcwidth/releases )
- [Commits](https://github.com/jquast/wcwidth/compare/0.2.8...0.2.9 )
---
updated-dependencies:
- dependency-name: wcwidth
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-06 14:42:06 +00:00
dependabot[bot]
18ab8d28d9
build(deps-dev): bump ruamel-yaml from 0.18.3 to 0.18.5
...
Bumps [ruamel-yaml]() from 0.18.3 to 0.18.5.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-06 14:41:55 +00:00
Willi Ballenthin
348120dea9
Merge pull request #1835 from mandiant/dependabot/pip/ruamel-yaml-0.18.3
...
build(deps-dev): bump ruamel-yaml from 0.17.35 to 0.18.3
2023-11-01 12:17:22 +01:00
Willi Ballenthin
435eea1b80
Merge pull request #1834 from mandiant/dependabot/pip/pytest-7.4.3
...
build(deps-dev): bump pytest from 7.4.2 to 7.4.3
2023-11-01 12:17:12 +01:00
Willi Ballenthin
621d42a093
Merge pull request #1831 from mandiant/dependabot/pip/flake8-no-implicit-concat-0.3.5
...
build(deps-dev): bump flake8-no-implicit-concat from 0.3.4 to 0.3.5
2023-11-01 12:17:04 +01:00
Willi Ballenthin
15701c6d12
Merge pull request #1829 from mandiant/dependabot/pip/mypy-1.6.1
...
build(deps-dev): bump mypy from 1.6.0 to 1.6.1
2023-11-01 12:16:55 +01:00
Willi Ballenthin
ec7fc86dc5
Merge pull request #1828 from mandiant/dependabot/pip/types-requests-2.31.0.10
...
build(deps-dev): bump types-requests from 2.31.0.2 to 2.31.0.10
2023-11-01 12:16:46 +01:00
dependabot[bot]
8d55c2f249
build(deps-dev): bump ruamel-yaml from 0.17.35 to 0.18.3
...
Bumps [ruamel-yaml]() from 0.17.35 to 0.18.3.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-30 14:11:50 +00:00
dependabot[bot]
66607f1412
build(deps-dev): bump pytest from 7.4.2 to 7.4.3
...
Bumps [pytest](https://github.com/pytest-dev/pytest ) from 7.4.2 to 7.4.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/7.4.2...7.4.3 )
---
updated-dependencies:
- dependency-name: pytest
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-30 14:11:00 +00:00
dependabot[bot]
874faf0901
build(deps-dev): bump mypy from 1.6.0 to 1.6.1
...
Bumps [mypy](https://github.com/python/mypy ) from 1.6.0 to 1.6.1.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v1.6.0...v1.6.1 )
---
updated-dependencies:
- dependency-name: mypy
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-24 19:48:35 +00:00
dependabot[bot]
e7198b2aaf
build(deps-dev): bump flake8-no-implicit-concat from 0.3.4 to 0.3.5
...
Bumps [flake8-no-implicit-concat](https://github.com/10sr/flake8-no-implicit-concat ) from 0.3.4 to 0.3.5.
- [Release notes](https://github.com/10sr/flake8-no-implicit-concat/releases )
- [Changelog](https://github.com/10sr/flake8-no-implicit-concat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/10sr/flake8-no-implicit-concat/compare/v0.3.4...v0.3.5 )
---
updated-dependencies:
- dependency-name: flake8-no-implicit-concat
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-23 14:47:26 +00:00
dependabot[bot]
426931c392
build(deps-dev): bump types-requests from 2.31.0.2 to 2.31.0.10
...
Bumps [types-requests](https://github.com/python/typeshed ) from 2.31.0.2 to 2.31.0.10.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-requests
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-23 14:47:03 +00:00
dependabot[bot]
fec1e6a947
build(deps-dev): bump black from 23.9.1 to 23.10.0
...
Bumps [black](https://github.com/psf/black ) from 23.9.1 to 23.10.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/23.9.1...23.10.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-23 14:46:59 +00:00
Willi Ballenthin
40d9587fa4
Merge pull request #1808 from mandiant/dependabot/pip/ruamel-yaml-0.17.35
...
build(deps-dev): bump ruamel-yaml from 0.17.32 to 0.17.35
2023-10-17 09:59:41 +02:00
Willi Ballenthin
430fdb074b
Merge pull request #1807 from mandiant/dependabot/pip/pre-commit-3.5.0
...
build(deps-dev): bump pre-commit from 3.4.0 to 3.5.0
2023-10-17 09:59:30 +02:00
Willi Ballenthin
0324d24490
Merge pull request #1806 from mandiant/dependabot/pip/flake8-simplify-0.21.0
...
build(deps-dev): bump flake8-simplify from 0.20.0 to 0.21.0
2023-10-17 09:59:21 +02:00
Willi Ballenthin
41c286d1a3
Merge pull request #1805 from mandiant/dependabot/pip/pyinstaller-6.1.0
...
build(deps-dev): bump pyinstaller from 6.0.0 to 6.1.0
2023-10-17 09:59:13 +02:00
dependabot[bot]
de0c35b6ad
build(deps-dev): bump ruamel-yaml from 0.17.32 to 0.17.35
...
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree ) from 0.17.32 to 0.17.35.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-16 14:18:33 +00:00
dependabot[bot]
d99b454c0e
build(deps-dev): bump pre-commit from 3.4.0 to 3.5.0
...
Bumps [pre-commit](https://github.com/pre-commit/pre-commit ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases )
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pre-commit/pre-commit/compare/v3.4.0...v3.5.0 )
---
updated-dependencies:
- dependency-name: pre-commit
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-16 14:18:11 +00:00
dependabot[bot]
44f156925a
build(deps-dev): bump flake8-simplify from 0.20.0 to 0.21.0
...
Bumps [flake8-simplify](https://github.com/MartinThoma/flake8-simplify ) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/MartinThoma/flake8-simplify/releases )
- [Changelog](https://github.com/MartinThoma/flake8-simplify/blob/main/CHANGELOG.md )
- [Commits](https://github.com/MartinThoma/flake8-simplify/commits/0.21.0 )
---
updated-dependencies:
- dependency-name: flake8-simplify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-16 14:17:47 +00:00
dependabot[bot]
599c115767
build(deps-dev): bump pyinstaller from 6.0.0 to 6.1.0
...
Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases )
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst )
- [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.0.0...v6.1.0 )
---
updated-dependencies:
- dependency-name: pyinstaller
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-16 14:17:36 +00:00
dependabot[bot]
6ecc9b77b9
build(deps-dev): bump mypy from 1.5.1 to 1.6.0
...
Bumps [mypy](https://github.com/python/mypy ) from 1.5.1 to 1.6.0.
- [Commits](https://github.com/python/mypy/compare/v1.5.1...v1.6.0 )
---
updated-dependencies:
- dependency-name: mypy
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-16 14:17:01 +00:00
Moritz
8b6fa35e9f
Merge pull request #1794 from mandiant/dependabot/pip/pyinstaller-6.0.0
...
build(deps-dev): bump pyinstaller from 5.10.1 to 6.0.0
2023-10-11 13:58:48 +02:00
Moritz
312ad48041
Merge pull request #1801 from mandiant/dependabot/pip/dnfile-0.14.1
...
build(deps-dev): bump dnfile from 0.13.0 to 0.14.1
2023-10-11 12:20:07 +02:00