some-github-metrics

some-github-metrics copied to clipboard

Bumps [certifi](https://github.com/certifi/python-certifi) from 2019.11.28 to 2022.12.7. Commits 9e9e840 2022.12.07 b81bdb2 2022.09.24 939a28f 2022.09.14 aca828a 2022.06.15.2 de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ... b8eb5e9 2022.06.15.1...

dependabot[bot]

Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.2.0 to 9.3.0. Release notes Sourced from pillow's releases. 9.3.0 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html Changes Initialize libtiff buffer when saving #6699 [@​radarhere] Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@​wiredfool]...

dependabot[bot]

Bumps [tensorflow](https://github.com/tensorflow/tensorflow) from 2.5.0rc1 to 2.9.3. Release notes Sourced from tensorflow's releases. TensorFlow 2.9.3 Release 2.9.3 This release introduces several vulnerability fixes: Fixes an overflow in tf.keras.losses.poisson (CVE-2022-41887) Fixes a...

dependabot[bot]

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.15.8 to 3.18.3. Release notes Sourced from protobuf's releases. Protocol Buffers v3.18.3 C++ Reduce memory consumption of MessageSet parsing This release addresses a Security Advisory for C++...

dependabot[bot]

Bumps [nbconvert](https://github.com/jupyter/nbconvert) from 6.0.7 to 6.5.1. Release notes Sourced from nbconvert's releases. Release 6.5.1 No release notes provided. 6.5.0 What's Changed Drop dependency on testpath. by @​anntzer in jupyter/nbconvert#1723 Adopt...

dependabot[bot]

Bumps [mistune](https://github.com/lepture/mistune) from 0.8.4 to 2.0.3. Release notes Sourced from mistune's releases. Version 2.0.2 Fix escape_url via lepture/mistune#295 Version 2.0.1 Fix XSS for image link syntax. Version 2.0.0 First release...

dependabot[bot]

Bumps [arrow](https://github.com/arrow-py/arrow) from 0.14.7 to 0.15.1. Release notes Sourced from arrow's releases. Version 0.15.1 [FIX] Fixed a bug that caused Arrow to fail when passed a negative timestamp string. [FIX]...

dependabot[bot]

Bumps [numpy](https://github.com/numpy/numpy) from 1.19.5 to 1.22.0. Release notes Sourced from numpy's releases. v1.22.0 NumPy 1.22.0 Release Notes NumPy 1.22.0 is a big release featuring the work of 153 contributors spread...

dependabot[bot]

Bumps [notebook](http://jupyter.org) from 6.3.0 to 6.4.12. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [ipython](https://github.com/ipython/ipython) from 7.22.0 to 7.31.1. Commits e321e76 release 7.31.1 67ca2b3 Merge pull request from GHSA-pq7m-3gw7-gq5x 2794330 back to dev be343e7 release 7.31.0 0fcf2c4 Merge pull request #13428 from meeseeksmachine/auto-backport-of-pr-13427-on-7.x...

dependabot[bot]