Lokasi ngalangkungan proxy:   [ UP ]  
[Ngawartoskeun bug]   [Panyetelan cookie]                
Skip to content

Bump bleach from 3.3.0 to 3.3.1#44

Merged
haney merged 1 commit into
masterfrom
dependabot/pip/bleach-3.3.1
Jul 27, 2021
Merged

Bump bleach from 3.3.0 to 3.3.1#44
haney merged 1 commit into
masterfrom
dependabot/pip/bleach-3.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2021

Copy link
Copy Markdown
Contributor

Bumps bleach from 3.3.0 to 3.3.1.

Changelog

Sourced from bleach's changelog.

Version 3.3.1 (July 14th, 2021)

Security fixes

None

Features

  • add more tests for CVE-2021-23980 / GHSA-vv2x-vrpj-qqpq
  • bump python version to 3.8 for tox doc, vendorverify, and lint targets
  • update bug report template tag
  • update vendorverify script to detect and fail when extra files are vendored
  • update release process docs to check vendorverify passes locally

Bug fixes

  • remove extra vendored django present in the v3.3.0 whl #595
  • duplicate h1 header doc fix (thanks Nguyễn Gia Phong / @​McSinyx!)
Commits
  • 99579a9 Merge pull request #602 from mozilla/prepare-3.3.1
  • cf313fa Update for v3.3.1 release
  • 76021fa Merge pull request #601 from mozilla/fix-598-verify-vendor
  • ef0a2fa docs: add vendorverify and artifact verification to release process
  • 5992266 tox: bump lint and vendorverify python to 3.8
  • 1c16d17 scripts: fail tox vendorverify target when tree diff fails
  • ee775e2 Update tox.ini
  • 8da3105 Update bug-report.md
  • 3e5d6aa Merge pull request #586 from McSinyx/change-head-dup
  • 45f3de7 Remove duplicated h1 in changelog
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2021
Bumps [bleach](https://github.com/mozilla/bleach) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/mozilla/bleach/releases)
- [Changelog](https://github.com/mozilla/bleach/blob/master/CHANGES)
- [Commits](mozilla/bleach@v3.3.0...v3.3.1)

---
updated-dependencies:
- dependency-name: bleach
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/bleach-3.3.1 branch from 9039c3e to 7406870 Compare July 27, 2021 14:18
@haney haney merged commit 60687b4 into master Jul 27, 2021
@dependabot dependabot Bot deleted the dependabot/pip/bleach-3.3.1 branch July 27, 2021 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant