Skip to content

Bump the pip group across 1 directory with 2 updates - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-1032d7cad1
Closed

Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-1032d7cad1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubApr 12, 2024

Copy link
Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.

Updates idna from 3.6 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0

Release notes

Sourced from pillow's releases.

10.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html

Changes

... (truncated)

Changelog

Sourced from pillow's changelog.

10.3.0 (2024-04-01)

  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928 [radarhere, hugovk]

  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927 [radarhere, hugovk]

  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883 [radarhere]

  • Add --report argument to __main__.py to omit supported formats #7818 [nulano, radarhere, hugovk]

  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920 [radarhere]

  • Fix editable installation with custom build backend and configuration options #7658 [nulano, radarhere]

  • Fix putdata() for I;16N on big-endian #7209 [Yay295, hugovk, radarhere]

  • Determine MPO size from markers, not EXIF data #7884 [radarhere]

  • Improved conversion from RGB to RGBa, LA and La #7888 [radarhere]

  • Support FITS images with GZIP_1 compression #7894 [radarhere]

  • Use I;16 mode for 9-bit JPEG 2000 images #7900 [scaramallion, radarhere]

  • Raise ValueError if kmeans is negative #7891 [radarhere]

  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893 [radarhere]

  • Raise ValueError for negative values when loading P1-P3 PPM images #7882 [radarhere]

  • Added reading of JPEG2000 palettes #7870 [radarhere]

  • Added alpha_quality argument when saving WebP images #7872 [radarhere]

... (truncated)

Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added the dependencies Pull requests that update a dependency file label Apr 12, 2024
@dependabotdependabotBot mentioned this pull request Apr 12, 2024
Closed
@dependabot@github

dependabotBot commented on behalf of githubMay 21, 2024

Copy link
Copy Markdown
Author

Superseded by #5.

@dependabotdependabotBot closed this May 21, 2024
@dependabot
dependabotBot deleted the dependabot/pip/pip-1032d7cad1 branch May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
Bump the pip group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4 · PythonBiellaGroup/mkdocs-tutorial · GitHub
Skip to content
Bump the pip group across 1 directory with 2 updates - #4
Closed
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Closed
Bump the pip group across 1 directory with 2 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/pip/pip-1032d7cad1
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubApr 12, 2024

Copy link


Copy Markdown

Bumps the pip group with 2 updates in the / directory: idna and pillow.
Updates idna from 3.6 to 3.7
Release notes
Sourced from idna's releases.
v3.7
What's Changed
  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Full Changelog: kjd/idna@v3.6...v3.7
Changelog
Sourced from idna's changelog.
3.7 (2024-04-11)
++++++++++++++++
  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
[radarhere, hugovk]
  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval()#7927
[radarhere, hugovk]
  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883
[radarhere]
  • Add --report argument to __main__.py to omit supported formats #7818
[nulano, radarhere, hugovk]
  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920
[radarhere]
  • Fix editable installation with custom build backend and configuration options #7658
[nulano, radarhere]
  • Fix putdata() for I;16N on big-endian #7209
[Yay295, hugovk, radarhere]
  • Determine MPO size from markers, not EXIF data #7884
[radarhere]
  • Improved conversion from RGB to RGBa, LA and La #7888
[radarhere]
  • Support FITS images with GZIP_1 compression #7894
[radarhere]
  • Use I;16 mode for 9-bit JPEG 2000 images #7900
[scaramallion, radarhere]
  • Raise ValueError if kmeans is negative #7891
[radarhere]
  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893
[radarhere]
  • Raise ValueError for negative values when loading P1-P3 PPM images #7882
[radarhere]
  • Added reading of JPEG2000 palettes #7870
[radarhere]
  • Added alpha_quality argument when saving WebP images #7872
[radarhere]
... (truncated)
Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the pip group across 1 directory with 2 updates
a2506a7
Bumps the pip group with 2 updates in the / directory: [idna](https://github.com/kjd/idna) and [pillow](https://github.com/python-pillow/Pillow).
Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)
Updates `pillow` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)
---
updated-dependencies:
- dependency-name: idna
dependency-type: indirect
dependency-group: pip
- dependency-name: pillow
dependency-type: indirect
dependency-group: pip
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added
the 
dependencies
Pull requests that update a dependency file
label
Apr 12, 2024
@dependabotdependabotBot
mentioned this pull request
Apr 12, 2024
 Closed

@dependabot@github
dependabotBot
commented
on behalf of githubMay 21, 2024

Copy link


Copy Markdown

Author
Superseded by #5.
@dependabotdependabotBot
closed this
May 21, 2024
@dependabot
dependabotBot
deleted the

dependabot/pip/pip-1032d7cad1

branch
May 21, 2024 07:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency file

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants