clay

clay copied to clipboard

Bump mistune from 0.8.3 to 2.0.3

1

Bumps [mistune](https://github.com/lepture/mistune) from 0.8.3 to 2.0.3. Release notes Sourced from mistune's releases. Version 2.0.2 Fix escape_url via lepture/mistune#295 Version 2.0.1 Fix XSS for image link syntax. Version 2.0.0 First release...

dependabot[bot]

Bump codecov from 2.0.15 to 2.0.16

1

Bumps [codecov](https://github.com/codecov/codecov-python) from 2.0.15 to 2.0.16. Changelog Sourced from codecov's changelog. 2.0.16 fixed reported command injection vulnerability. Commits 3a8b06b Version 2.0.16 b2951c0 Merge pull request #231 from codecov/ce-1380 2a80aa4 CE-1380_sanitize_args...

dependabot[bot]

Bump ujson from 1.35 to 5.4.0

1

Bumps [ujson](https://github.com/ultrajson/ultrajson) from 1.35 to 5.4.0. Release notes Sourced from ujson's releases. 5.4.0 Added Add support for arbitrary size integers (#548) @​JustAnotherArchivist Fixed CVE-2022-31116: Replace wchar_t string decoding implementation with...

dependabot[bot]

Bump numpy from 1.15.4 to 1.22.0 in /apps/blender/resources/images/entrypoints/scripts/verifier_tools

1

Bumps [numpy](https://github.com/numpy/numpy) from 1.15.4 to 1.22.0. Release notes Sourced from numpy's releases. v1.22.0 NumPy 1.22.0 Release Notes NumPy 1.22.0 is a big release featuring the work of 153 contributors spread...

dependabot[bot]

Bump numpy from 1.15.4 to 1.22.0

1

Bumps [numpy](https://github.com/numpy/numpy) from 1.15.4 to 1.22.0. Release notes Sourced from numpy's releases. v1.22.0 NumPy 1.22.0 Release Notes NumPy 1.22.0 is a big release featuring the work of 153 contributors spread...

dependabot[bot]

Bump regex from 1.1.0 to 1.5.6 in /rust/golem

1

Bumps [regex](https://github.com/rust-lang/regex) from 1.1.0 to 1.5.6. Changelog Sourced from regex's changelog. 1.5.6 (2022-05-20) This release includes a few bug fixes, including a bug that produced incorrect matches when a non-greedy...

dependabot[bot]

Bump twisted from 19.7.0 to 22.4.0

1

Bumps [twisted](https://github.com/twisted/twisted) from 19.7.0 to 22.4.0. Release notes Sourced from twisted's releases. Twisted 22.4.0 (2022-04-11) Features twisted.python.failure.Failure tracebacks now capture module information, improving compatibility with the Raven Sentry client. (#7796)...

dependabot[bot]

Bump pillow from 6.2.2 to 9.0.1 in /apps/blender/resources/images/entrypoints/scripts/verifier_tools

1

Bumps [pillow](https://github.com/python-pillow/Pillow) from 6.2.2 to 9.0.1. Release notes Sourced from pillow's releases. 9.0.1 https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html Changes In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [@​radarhere, @​hugovk] Restrict builtins within...

dependabot[bot]

Bump pillow from 6.2.2 to 9.0.1

1

Bumps [pillow](https://github.com/python-pillow/Pillow) from 6.2.2 to 9.0.1. Release notes Sourced from pillow's releases. 9.0.1 https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html Changes In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [@​radarhere, @​hugovk] Restrict builtins within...

dependabot[bot]

Bump protobuf from 3.7.1 to 3.15.0

1

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.7.1 to 3.15.0. Release notes Sourced from protobuf's releases. Protocol Buffers v3.15.0 Protocol Compiler Optional fields for proto3 are enabled by default, and no longer require the...

dependabot[bot]