Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency pygments to ~2.15.0 [security] #93

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Aug 6, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
Pygments (changelog) ~2.13 -> ~2.15.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in Pygments until 2.15.0 via SmithyLexer.


Release Notes

pygments/pygments (Pygments)

v2.15.0

Compare Source

(released April 10th, 2023)

  • Added lexers:

  • Updated lexers:

    • AMDGPU: Add support for scratch_ instructions, the attr*.* argument,
      as well as the off modifier (#​2327).

    • APDL: Miscellaneous improvements (#​2314)

    • bash/tcsh:

    • Chapel: Support attributes (#​2376)

    • CMake: Implement bracket style comments (#​2338, #​2354)

    • CSS: Improve lexing of numbers inside function calls (#​2382, #​2383)

    • diff: Support normal diff syntax, as opposed to unified diff syntax (#​2321)

    • GLSL, HLSL:

      • Support line continuations in preprocessor code (#​2350)
      • Improve preprocessor directive handling (#​2357)
    • LilyPond: minor update of builtins

    • PHP: support attributes (#​2055, #​2347, #​2360), fix anonymous classes without
      parameters (#​2359), improve lexing of variable variable syntax (#​2358)

    • Python:

    • Rebol/Red: Don't require script headers (#​2348, #​2349)

    • Spice: Update keywords (#​2336)

    • SQL+Jinja (analyse_text method): Fix catastrophic backtracking (#​2355)

    • Terraform: Add hcl alias (#​2375)

  • Declare support for Python 3.11 and drop support for Python 3.6 (#​2324).

  • Update native style to improve contrast (#​2325).

  • Update `github-dark`` style to match latest Primer style (#​2401)

  • Revert a change that made guessing lexers based on file names slower
    on Python 3.10 and older (#​2328).

  • Fix some places where a locale-dependent encoding could unintentionally
    be used instead of UTF-8 (#​2326).

  • Fix Python traceback handling (#​2226, #​2329).

  • Groff formatter: sort color definitions for reproducibility (#​2343)

  • Move project metadata to pyproject.toml, remove setup.py
    and setup.cfg (#​2342)

  • The top-level Makefile has been removed. Instead, all shortcuts
    for developing are now defined and run through tox. The doc folder
    still contains a Makefile as an alternative to tox -e doc.

v2.14.0

Compare Source

(released January 1st, 2023)

  • Added lexers:

  • Updated lexers:

    • Abap: Update keywords (#​2281)

    • Alloy: Update for Alloy 6 (#​1963)

    • C family (C, C++ and many others):

      • Fix an issue where a chunk would be wrongly recognized as a function
        definition due to braces in comments (#​2210)
      • Improve parantheses handling for function definitions (#​2207, #​2208)
    • C#: Fix number and operator recognition (#​2256, #​2257)

    • CSound: Updated builtins (#​2268)

    • F#: Add .fsx file extension (#​2282)

    • gas (GNU assembler): recognize braces as punctuation (#​2230)

    • HTTP: Add CONNECT keyword (#​2242)

    • Inform 6: Fix lexing of properties and doubles (#​2214)

    • INI: Allow comments that are not their own line (#​2217, #​2161)

    • Java properties: Fix issue with whitespace-delimited keys, support
      comments starting with ! and escapes, no longer support undocumented
      ; and // comments (#​2241)

    • LilyPond: Improve heuristics, add \maxima duration (#​2283)

    • LLVM: Add opaque pointer type (#​2269)

    • Macaulay2: Update keywords (#​2305)

    • Minecraft-related lexers (SNB and Minecraft function) moved to
      pygments.lexers.minecraft (#​2276)

    • Nim: General improvements (#​1970)

    • Nix: Fix single quotes inside indented strings (#​2289)

    • Objective J: Fix catastrophic backtracking (#​2225)

    • NASM: Add support for SSE/AVX/AVX-512 registers as well as 'rel'
      and 'abs' address operators (#​2212)

    • Powershell:

    • Solidity: Add boolean operators (#​2292)

    • Spice: Add enum keyword and fix a bug regarding binary,
      hexadecimal and octal number tokens (#​2227)

    • YAML: Accept colons in key names (#​2277)

  • Fix make mapfiles when Pygments is not installed in editable mode
    (#​2223)

  • Support more filetypes and compression types in autopygmentize (#​2219)

  • Merge consecutive tokens in Autohotkey, Clay (#​2248)

  • Add .nasm as a recognized file type for NASM (#​2280)

  • Add *Spec.hs as a recognized file type for HSpec (#​2308)

  • Add *.pyi (for typing stub files) as a recognized file type for
    Python (#​2231)

  • The HTML lexer no longer emits empty spans for whitespace (#​2304)

  • Fix IRCFormatter inserting linenumbers incorrectly (#​2270)


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 839ae8c to 895c08d Compare October 9, 2024 08:29
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.15.0 [security] chore(deps): update dependency pygments to ~2.18.0 [security] Oct 9, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 895c08d to 5405adf Compare October 9, 2024 11:26
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.18.0 [security] chore(deps): update dependency pygments to ~2.15.0 [security] Oct 9, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 5405adf to 8988444 Compare October 14, 2024 09:44
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.15.0 [security] chore(deps): update dependency pygments to ~2.18.0 [security] Oct 14, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 8988444 to 3298b68 Compare October 14, 2024 20:14
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.18.0 [security] chore(deps): update dependency pygments to ~2.15.0 [security] Oct 14, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 3298b68 to 7e20f0b Compare October 22, 2024 18:42
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.15.0 [security] chore(deps): update dependency pygments to ~2.18.0 [security] Oct 22, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 7e20f0b to 086f93d Compare October 22, 2024 21:51
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.18.0 [security] chore(deps): update dependency pygments to ~2.15.0 [security] Oct 22, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 086f93d to 5defa18 Compare October 28, 2024 17:38
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.15.0 [security] chore(deps): update dependency pygments to ~2.18.0 [security] Oct 28, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 5defa18 to 7e82f59 Compare October 28, 2024 19:52
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.18.0 [security] chore(deps): update dependency pygments to ~2.15.0 [security] Oct 28, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from 7e82f59 to d4fa811 Compare October 30, 2024 08:03
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.15.0 [security] chore(deps): update dependency pygments to ~2.18.0 [security] Oct 30, 2024
@renovate renovate bot force-pushed the renovate/pypi-pygments-vulnerability branch from d4fa811 to 9f25ec3 Compare October 30, 2024 10:34
@renovate renovate bot changed the title chore(deps): update dependency pygments to ~2.18.0 [security] chore(deps): update dependency pygments to ~2.15.0 [security] Oct 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants