Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v2.0: fix audit (backport of #4014) #4021

Open
wants to merge 2 commits into
base: v2.0
Choose a base branch
from
Open

Conversation

mergify[bot]
Copy link

@mergify mergify bot commented Dec 9, 2024

Problem

the audit failed. we need to upgrade idna to >= 1.0.0. however, the dep chain looks like:

jsonrpc-core-client v18.0.0 -> jsonrpc-client-transports v18.0.0 -> url v1.7.2 -> idna v0.1.5

and jsonrpc-core-client has not released any new version in the past 3y ...

Summary of Changes

ignore it as a stopgap


This is an automatic backport of pull request #4014 done by Mergify.

@mergify mergify bot added the conflicts label Dec 9, 2024
@mergify mergify bot requested a review from a team as a code owner December 9, 2024 19:24
Copy link
Author

mergify bot commented Dec 9, 2024

Cherry-pick of 6c86ce5 has failed:

On branch mergify/bp/v2.0/pr-4014
Your branch is up to date with 'origin/v2.0'.

You are currently cherry-picking commit 6c86ce59aa.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   ci/do-audit.sh

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

yihau and others added 2 commits December 10, 2024 19:08
(cherry picked from commit 6c86ce5)

# Conflicts:
#	ci/do-audit.sh
@yihau yihau force-pushed the mergify/bp/v2.0/pr-4014 branch from 5b31e83 to d240ed2 Compare December 10, 2024 11:09
@yihau yihau requested a review from joncinque December 11, 2024 04:15
@yihau yihau removed the conflicts label Dec 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants