Avengers-Of-GitHub

Avengers-Of-GitHub copied to clipboard

Bumps [joblib](https://github.com/joblib/joblib) from 0.14.1 to 1.2.0. Changelog Sourced from joblib's changelog. Release 1.2.0 Fix a security issue where eval(pre_dispatch) could potentially run arbitrary code. Now only basic numerics are supported....

dependabot[bot]

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.6.1 to 3.18.3. Release notes Sourced from protobuf's releases. Protocol Buffers v3.18.3 C++ Reduce memory consumption of MessageSet parsing This release addresses a Security Advisory for C++...

dependabot[bot]

Bumps [jwcrypto](https://github.com/latchset/jwcrypto) from 0.7 to 1.4. Release notes Sourced from jwcrypto's releases. Version 1.4 This is a security release to address CVE-2022-3102. The JWT code can auto-detect the type of...

dependabot[bot]

Bumps [nbconvert](https://github.com/jupyter/nbconvert) from 5.6.1 to 6.5.1. Release notes Sourced from nbconvert's releases. Release 6.5.1 No release notes provided. 6.5.0 What's Changed Drop dependency on testpath. by @​anntzer in jupyter/nbconvert#1723 Adopt...

dependabot[bot]

Bumps [mistune](https://github.com/lepture/mistune) from 0.8.4 to 2.0.3. Release notes Sourced from mistune's releases. Version 2.0.2 Fix escape_url via lepture/mistune#295 Version 2.0.1 Fix XSS for image link syntax. Version 2.0.0 First release...

dependabot[bot]

Bumps [notebook](http://jupyter.org) from 6.0.3 to 6.4.12. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.7.1 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...

dependabot[bot]

Bumps [ipython](https://github.com/ipython/ipython) from 7.13.0 to 7.16.3. Commits d43c7c7 release 7.16.3 5fa1e40 Merge pull request from GHSA-pq7m-3gw7-gq5x 8df8971 back to dev 9f477b7 release 7.16.2 138f266 bring back release helper from master...

dependabot[bot]

Bumps [django](https://github.com/django/django) from 3.0.5 to 3.1.13. Commits 43873b9 [3.1.x] Bumped version for 3.1.13 release. 0bd57a8 [3.1.x] Fixed CVE-2021-35042 -- Prevented SQL injection in QuerySet.order_by(). 8dc1cc0 [3.1.x] Added stub release notes...

dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.8 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependabot[bot]