Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update gitpython to 3.1.37 to fix vulnerability #1963

Merged
merged 1 commit into from
Oct 11, 2023

Conversation

albertvillanova
Copy link
Member

@albertvillanova albertvillanova commented Oct 11, 2023

Update gitpython to 3.1.37 to fix vulnerability.

This should fix 10 dependabot alerts.

Supersede and close #1958.
Supersede and close #1959.

@albertvillanova albertvillanova added security dependencies Pull requests that update a dependency file labels Oct 11, 2023
@codecov-commenter
Copy link

codecov-commenter commented Oct 11, 2023

Codecov Report

All modified lines are covered by tests ✅

Comparison is base (84d048b) 85.44% compared to head (364c5c2) 90.74%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1963      +/-   ##
==========================================
+ Coverage   85.44%   90.74%   +5.29%     
==========================================
  Files          23      237     +214     
  Lines         907    14808   +13901     
==========================================
+ Hits          775    13437   +12662     
- Misses        132     1371    +1239     
Flag Coverage Δ
jobs_cache_maintenance 95.56% <ø> (?)
jobs_mongodb_migration 86.32% <ø> (?)
libs_libcommon 92.17% <ø> (?)
services_admin 85.44% <ø> (ø)
services_api 86.79% <ø> (?)
services_rows 84.95% <ø> (?)
services_search 79.59% <ø> (?)
services_sse-api 94.16% <ø> (?)
services_worker 92.56% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 214 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@albertvillanova albertvillanova merged commit dc1b7d9 into main Oct 11, 2023
20 checks passed
@albertvillanova albertvillanova deleted the update-gitpython-3.1.37 branch October 11, 2023 10:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants