Update deps to address security vulnerabilities #5873
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Thank you for the PR! The changelog has not been updated, so here is a friendly reminder to check if you need to add an entry. |
snejus
force-pushed
the
update-deps-add-xdist
branch
4 times, most recently
from
38b6102 to
bf08de5
Compare
snejus
changed the title
snejus
force-pushed
the
update-deps-add-xdist
branch
from
bf08de5 to
62bbd18
Compare
wisp3rwind
approved these changes
Jul 17, 2025
Member
wisp3rwind
left a comment
wisp3rwind
left a comment
There was a problem hiding this comment.
Looks sensible to me 👍
FWIW, the new pathspec dependency comes from python/mypy#18696. Some discussion around that here: python/mypy#19275
Pygments has become a new dep of pytest, which is why it's non-optional now.
I'm a bit puzzled at how this fits with closing #5749; but anyway, let's merge this!
Member
Author
|
@wisp3rwind I see how closing #5749 is confusing: the main reason why I ended up updating the action here was that I wanted to tick off each of the issues reported here. I don't think I had initially realised that the issue with the action was present in this list. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR updates dependencies to address security vulnerabilities
Key changes
tj-actions/changed-filesfrom v44/v45 to v46 across all workflows