Skip to content

[Auto-generated] Update dependencies #449

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TEAM4-0 merged 3 commits into from
Mar 25, 2026
Merged

[Auto-generated] Update dependencies #449

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
d551454
Update `pre-commit` hooks
TEAM4-0 Mar 25, 2026
5f884aa
Ignore irrelevant pygments security warning
CasperWA Mar 25, 2026
3f41bdc
Also ignore for the separate pip-audit job
CasperWA Mar 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions .github/workflows/ci_tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,8 +67,13 @@ jobs:
# DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.
# An attacker with write access to the cache directory can achieve arbitrary code execution
# when a victim application reads from the cache.
# CVE-2026-4539: pygments 2.19.2
# A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the
# function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in
# inefficient regular expression complexity. The attack is only possible with local access.
ignore-vulns: |
CVE-2025-69872
CVE-2026-4539

- name: Build docs
run: mkdocs build --strict
Expand Down Expand Up @@ -102,3 +107,9 @@ jobs:
uses: pypa/gh-action-pip-audit@v1.1.0
with:
inputs: ${{ github.workspace }}/requirements.txt ${{ github.workspace }}/.github/utils/requirements.txt
# CVE-2026-4539: pygments 2.19.2
# A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the
# function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in
# inefficient regular expression complexity. The attack is only possible with local access.
ignore-vulns: |
CVE-2026-4539
4 changes: 2 additions & 2 deletions .pre-commit-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ repos:
# More information can be found in its source repository:
# https://github.com/DavidAnson/markdownlint-cli2
- repo: https://github.com/DavidAnson/markdownlint-cli2
rev: v0.21.0
rev: v0.22.0
hooks:
- id: markdownlint-cli2
name: markdownlint
Expand Down Expand Up @@ -81,7 +81,7 @@ repos:
# More information can be found in its documentation:
# https://docs.astral.sh/ruff/
- repo: https://github.com/astral-sh/ruff-pre-commit
rev: v0.15.6
rev: v0.15.7
hooks:
- id: ruff-check
name: ruff
Expand Down
4 changes: 2 additions & 2 deletions {{ cookiecutter.project_slug }}/.pre-commit-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ repos:
# More information can be found in its source repository:
# https://github.com/DavidAnson/markdownlint-cli2
- repo: https://github.com/DavidAnson/markdownlint-cli2
rev: v0.21.0
rev: v0.22.0
hooks:
- id: markdownlint-cli2
name: markdownlint
Expand Down Expand Up @@ -84,7 +84,7 @@ repos:
# More information can be found in its documentation:
# https://docs.astral.sh/ruff/
- repo: https://github.com/astral-sh/ruff-pre-commit
rev: v0.15.6
rev: v0.15.7
hooks:
- id: ruff-check
name: ruff
Expand Down