Skip to content

python310Packages.automat: don't depend on m2r#186198

Merged
mweinelt merged 1 commit intoNixOS:masterfrom
dotlambda:ris-mistune-0.8.4-known-vulnerabilities
Aug 12, 2022
Merged

python310Packages.automat: don't depend on m2r#186198
mweinelt merged 1 commit intoNixOS:masterfrom
dotlambda:ris-mistune-0.8.4-known-vulnerabilities

Conversation

@mweinelt
Copy link
Member

@mweinelt mweinelt commented Aug 12, 2022

The latter depends on an outdated, vulnerable version of mistune.

Description of changes
Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 22.11 Release Notes (or backporting 22.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
    • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
  • Fits CONTRIBUTING.md.

@dotlambda
python310Packages.automat: don't depend on m2r
d3462c9 
The latter depends on an outdated, vulnerable version of mistune.
@github-actions github-actions bot added the 6.topic: python Python is a high-level, general-purpose programming language. label Aug 12, 2022
@mweinelt mweinelt requested review from dotlambda and risicle August 12, 2022 00:00
@mweinelt mweinelt merged commit 1493e8b into NixOS:master Aug 12, 2022
@ofborg ofborg bot added 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 1001-2500 This PR causes many rebuilds on Darwin and should most likely target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches. labels Aug 12, 2022
@github-actions
Copy link
Contributor

github-actions bot commented Aug 12, 2022

Backport failed for release-22.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-22.05
git worktree add -d .worktree/backport-186198-to-release-22.05 origin/release-22.05
cd .worktree/backport-186198-to-release-22.05
git checkout -b backport-186198-to-release-22.05
ancref=$(git merge-base 4957755660e49e392b5da64ce04ab5e61865f2ee d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b)
git cherry-pick -x $ancref..d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b

@mweinelt mweinelt mentioned this pull request Aug 12, 2022
Merged
13 tasks
@github-actions
Copy link
Contributor

github-actions bot commented Aug 12, 2022

Backport failed for release-22.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-22.05
git worktree add -d .worktree/backport-186198-to-release-22.05 origin/release-22.05
cd .worktree/backport-186198-to-release-22.05
git checkout -b backport-186198-to-release-22.05
ancref=$(git merge-base 4957755660e49e392b5da64ce04ab5e61865f2ee d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b)
git cherry-pick -x $ancref..d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b

3 similar comments
@github-actions
Copy link
Contributor

github-actions bot commented Aug 12, 2022

Backport failed for release-22.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-22.05
git worktree add -d .worktree/backport-186198-to-release-22.05 origin/release-22.05
cd .worktree/backport-186198-to-release-22.05
git checkout -b backport-186198-to-release-22.05
ancref=$(git merge-base 4957755660e49e392b5da64ce04ab5e61865f2ee d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b)
git cherry-pick -x $ancref..d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b

@github-actions
Copy link
Contributor

github-actions bot commented Aug 12, 2022

Backport failed for release-22.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-22.05
git worktree add -d .worktree/backport-186198-to-release-22.05 origin/release-22.05
cd .worktree/backport-186198-to-release-22.05
git checkout -b backport-186198-to-release-22.05
ancref=$(git merge-base 4957755660e49e392b5da64ce04ab5e61865f2ee d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b)
git cherry-pick -x $ancref..d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b

@github-actions
Copy link
Contributor

github-actions bot commented Aug 12, 2022

Backport failed for release-22.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-22.05
git worktree add -d .worktree/backport-186198-to-release-22.05 origin/release-22.05
cd .worktree/backport-186198-to-release-22.05
git checkout -b backport-186198-to-release-22.05
ancref=$(git merge-base 4957755660e49e392b5da64ce04ab5e61865f2ee d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b)
git cherry-pick -x $ancref..d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b

@mweinelt
Copy link
Member Author

mweinelt commented Aug 12, 2022

#186202

@dotlambda dotlambda deleted the ris-mistune-0.8.4-known-vulnerabilities branch August 12, 2022 03:54
@vcunat vcunat mentioned this pull request Aug 12, 2022
Merged
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FRidh FRidh Awaiting requested review from FRidh

@jonringer jonringer Awaiting requested review from jonringer

@SuperSandro2000 SuperSandro2000 Awaiting requested review from SuperSandro2000

@dotlambda dotlambda Awaiting requested review from dotlambda

@risicle risicle Awaiting requested review from risicle

Assignees

No one assigned

Labels

6.topic: python Python is a high-level, general-purpose programming language. 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 1001-2500 This PR causes many rebuilds on Darwin and should most likely target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mweinelt @dotlambda