FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

deps: bump pymdown-extensions to 11.0.1 in doc group by katsugtgz · Pull Request #997 · python-pendulum/pendulum · GitHub

deps: bump pymdown-extensions to 11.0.1 in doc group - #997

Closed
katsugtgz wants to merge 1 commit into
python-pendulum:masterfrom
katsugtgz:deps/pymdown-extensions-11.0.1
Closed

deps: bump pymdown-extensions to 11.0.1 in doc group#997
katsugtgz wants to merge 1 commit into
python-pendulum:masterfrom
katsugtgz:deps/pymdown-extensions-11.0.1

Conversation

Copy link
Copy Markdown

Updates pymdown-extensions to address GHSA-62q4-447f-wv8h, GHSA-9xwg-3r6f-jcx2, GHSA-gm37-52c6-37mw, GHSA-r6h4-mm7h-8pmq (same records as PYSEC-2026-1825, PYSEC-2026-2999, PYSEC-2026-3609, PYSEC-2026-3654).

Evidence:

  • pyproject.toml pinned pymdown-extensions = ">=6,<11" and poetry.lock resolved 10.12
  • osv-scanner reported the IDs above for pymdown-extensions 10.12 before the update
  • updated version: 11.0.1 (constraint widened to >=6,<12)

Validation:

  • osv-scanner no longer reports any advisory for pymdown-extensions after the update
  • PENDULUM_EXTENSIONS=0 poetry run pytest -q tests passes: 1841 passed, 3 skipped
  • poetry run pytest -q tests passes: 1841 passed, 3 skipped
  • poetry check --lock passes
  • docs build with mkdocs succeeds, same warning count as on master (17)

Scope: dependency/lockfile update only.

Copy link
Copy Markdown
Author

Closing: duplicate of #991, which already bumps pymdown-extensions to 11.0.1. Apologies for the noise.

katsugtgz closed this Aug 21, 2026
katsugtgz deleted the deps/pymdown-extensions-11.0.1 branch August 21, 2026 00:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant


Back | FazBrowse Home | New Git URL