BlogBackendProject

BlogBackendProject copied to clipboard

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.5.3 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...

dependabot[bot]

Bumps [pillow](https://github.com/python-pillow/Pillow) from 4.2.1 to 9.0.1. Release notes Sourced from pillow's releases. 9.0.1 https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html Changes In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [@​radarhere, @​hugovk] Restrict builtins within...

dependabot[bot]

Bumps [django](https://github.com/django/django) from 1.10.8 to 2.2.24. Commits 2da029d [2.2.x] Bumped version for 2.2.24 release. f27c38a [2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses. 053cc95 [2.2.x] Fixed CVE-2021-33203 --...

dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.22 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependabot[bot]

Bumps [pygments](https://github.com/pygments/pygments) from 2.2.0 to 2.7.4. Release notes Sourced from pygments's releases. 2.7.4 Updated lexers: Apache configurations: Improve handling of malformed tags (#1656) CSS: Add support for variables (#1633, #1666)...

dependabot[bot]

Bumps [pyyaml](https://github.com/yaml/pyyaml) from 3.12 to 5.4. Changelog Sourced from pyyaml's changelog. 5.4 (2021-01-19) yaml/pyyaml#407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA yaml/pyyaml#472 -- Fix for...

dependabot[bot]

Bumps [jinja2](https://github.com/pallets/jinja) from 2.9.6 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...

dependabot[bot]

Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.6.3 to 3.11.2. Release notes Sourced from djangorestframework's releases. Version 3.9.3 This is the last Django REST Framework release that will support Python 2. Be sure to...

dependabot[bot]

Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.10.3 to 0.19.0. Changelog Sourced from httplib2's changelog. 0.19.0 auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182 auth: WSSE token needs to be string not bytes...

dependabot[bot]

Bumps [bleach](https://github.com/mozilla/bleach) from 2.1.3 to 3.3.0. Changelog Sourced from bleach's changelog. Version 3.3.0 (February 1st, 2021) Backwards incompatible changes clean escapes HTML comments even when strip_comments=False Security fixes Fix bug...

dependabot[bot]