diff --git a/.github/workflows/ci_tests.yml b/.github/workflows/ci_tests.yml index d4bc7ac..155bcde 100644 --- a/.github/workflows/ci_tests.yml +++ b/.github/workflows/ci_tests.yml @@ -67,8 +67,13 @@ jobs: # DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. # An attacker with write access to the cache directory can achieve arbitrary code execution # when a victim application reads from the cache. + # CVE-2026-4539: pygments 2.19.2 + # A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the + # function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in + # inefficient regular expression complexity. The attack is only possible with local access. ignore-vulns: | CVE-2025-69872 + CVE-2026-4539 - name: Build docs run: mkdocs build --strict @@ -102,3 +107,9 @@ jobs: uses: pypa/gh-action-pip-audit@v1.1.0 with: inputs: ${{ github.workspace }}/requirements.txt ${{ github.workspace }}/.github/utils/requirements.txt + # CVE-2026-4539: pygments 2.19.2 + # A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the + # function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in + # inefficient regular expression complexity. The attack is only possible with local access. + ignore-vulns: | + CVE-2026-4539 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index b1df9c9..857411c 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -43,7 +43,7 @@ repos: # More information can be found in its source repository: # https://github.com/DavidAnson/markdownlint-cli2 - repo: https://github.com/DavidAnson/markdownlint-cli2 - rev: v0.21.0 + rev: v0.22.0 hooks: - id: markdownlint-cli2 name: markdownlint @@ -81,7 +81,7 @@ repos: # More information can be found in its documentation: # https://docs.astral.sh/ruff/ - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.6 + rev: v0.15.7 hooks: - id: ruff-check name: ruff diff --git a/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml b/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml index b71373c..c899794 100644 --- a/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml +++ b/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml @@ -48,7 +48,7 @@ repos: # More information can be found in its source repository: # https://github.com/DavidAnson/markdownlint-cli2 - repo: https://github.com/DavidAnson/markdownlint-cli2 - rev: v0.21.0 + rev: v0.22.0 hooks: - id: markdownlint-cli2 name: markdownlint @@ -84,7 +84,7 @@ repos: # More information can be found in its documentation: # https://docs.astral.sh/ruff/ - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.6 + rev: v0.15.7 hooks: - id: ruff-check name: ruff