mkdocs-material-boilerplate
mkdocs-material-boilerplate copied to clipboard
chore(deps): update dependency pygments to v2.15.0 [security]
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| Pygments (changelog) | ==2.11.2 -> ==2.15.0 |
GitHub Vulnerability Alerts
CVE-2022-40896
A ReDoS issue was discovered in pygments/lexers/smithy.py in Pygments until 2.15.0 via SmithyLexer.
Release Notes
pygments/pygments (Pygments)
v2.15.0
(released April 10th, 2023)
-
Added lexers:
-
Updated lexers:
-
AMDGPU: Add support for
scratch_instructions, theattr*.*argument, as well as theoffmodifier (#2327). -
APDL: Miscellaneous improvements (#2314)
-
bash/tcsh:
-
Chapel: Support attributes (#2376)
-
CSS: Improve lexing of numbers inside function calls (#2382, #2383)
-
diff: Support normal diff syntax, as opposed to unified diff syntax (#2321)
-
GLSL, HLSL:
-
LilyPond: minor update of builtins
-
PHP: support attributes (#2055, #2347, #2360), fix anonymous classes without parameters (#2359), improve lexing of variable variable syntax (#2358)
-
Python:
-
Spice: Update keywords (#2336)
-
SQL+Jinja (
analyse_textmethod): Fix catastrophic backtracking (#2355) -
Terraform: Add
hclalias (#2375)
-
-
Declare support for Python 3.11 and drop support for Python 3.6 (#2324).
-
Update
nativestyle to improve contrast (#2325). -
Update `github-dark`` style to match latest Primer style (#2401)
-
Revert a change that made guessing lexers based on file names slower on Python 3.10 and older (#2328).
-
Fix some places where a locale-dependent encoding could unintentionally be used instead of UTF-8 (#2326).
-
Groff formatter: sort color definitions for reproducibility (#2343)
-
Move project metadata to
pyproject.toml, removesetup.pyandsetup.cfg(#2342) -
The top-level
Makefilehas been removed. Instead, all shortcuts for developing are now defined and run through tox. Thedocfolder still contains aMakefileas an alternative totox -e doc.
v2.14.0
(released January 1st, 2023)
-
Added lexers:
-
Updated lexers:
-
Abap: Update keywords (#2281)
-
Alloy: Update for Alloy 6 (#1963)
-
C family (C, C++ and many others):
-
CSound: Updated builtins (#2268)
-
F#: Add
.fsxfile extension (#2282) -
gas (GNU assembler): recognize braces as punctuation (#2230)
-
HTTP: Add
CONNECTkeyword (#2242) -
Inform 6: Fix lexing of properties and doubles (#2214)
-
INI: Allow comments that are not their own line (#2217, #2161)
-
Java properties: Fix issue with whitespace-delimited keys, support comments starting with
!and escapes, no longer support undocumented;and//comments (#2241) -
LilyPond: Improve heuristics, add
\maximaduration (#2283) -
LLVM: Add opaque pointer type (#2269)
-
Macaulay2: Update keywords (#2305)
-
Minecraft-related lexers (SNB and Minecraft function) moved to
pygments.lexers.minecraft(#2276) -
Nim: General improvements (#1970)
-
Nix: Fix single quotes inside indented strings (#2289)
-
Objective J: Fix catastrophic backtracking (#2225)
-
NASM: Add support for SSE/AVX/AVX-512 registers as well as 'rel' and 'abs' address operators (#2212)
-
Powershell:
-
Solidity: Add boolean operators (#2292)
-
Spice: Add
enumkeyword and fix a bug regarding binary, hexadecimal and octal number tokens (#2227) -
YAML: Accept colons in key names (#2277)
-
-
Fix
make mapfileswhen Pygments is not installed in editable mode (#2223) -
Support more filetypes and compression types in
autopygmentize(#2219) -
Merge consecutive tokens in Autohotkey, Clay (#2248)
-
Add
.nasmas a recognized file type for NASM (#2280) -
Add
*Spec.hsas a recognized file type forHSpec(#2308) -
Add
*.pyi(for typing stub files) as a recognized file type for Python (#2231) -
The HTML lexer no longer emits empty spans for whitespace (#2304)
-
Fix
IRCFormatterinserting linenumbers incorrectly (#2270)
v2.13.0
(released August 15th, 2022)
-
Added lexers:
-
Updated lexers:
- Ada: support Ada 2022 (#2121); disable recognition of namespaces because it disturbs lexing of aspects (#2125)
- Agda: allow straight quotes in module names (#2163)
- C family (C, C++ and many others): allow comments between elements of function headers, e.g. between the arguments and the opening brace for the body (#1891)
- C++: Resolve several cases of
Errortokens (#2207, #2208) - Coq: Add some common keywords, improve recognition of
Setand qualified identifiers (#2158) - F*: Allow C-style comments anywhere in a line
- Fortran: Fix catastrophic backtracking with backslashes in strings (#2194)
- Go: add support for generics (#2167)
- Inform: Update for version 6.40 (#2190)
- Isabelle: recognize cartouches (#2089)
- Java: support multiline strings aka. text blocks (#2132)
- Kotlin: Add
valuemodifier (#2142) - LilyPond: Add some missing builtins
- Macaulay2: Update builtins (#2139)
- Matlab session: fix traceback when a line continuation ellipsis appears in the output (#2166)
- .NET: Add aliases for LibreOffice Basic, OpenOfficeBasic and StarOffice Basic (#2170)
- Nim: Use
Name.Builtininstead ofKeyword.Type(#2136) - PHP: fix
\"$var\"inside strings (#2105) - Python: only recognize
\N,\uand\Uescape sequences in string literals, but not in bytes literals where they are not supported (#2204) - Tcl: support
${name}variables (#2145) - Terraform: Accept leading whitespace for
<<heredoc delimiters (#2162) - Teraterm: Various improvements (#2165)
- Spice: add support for the recently added features including more builtin functions and bin, oct, hex number formats (#2206)
-
Added styles:
-
Pygments now tries to use the
importlib.metadatamodule to discover plugins instead of the slowerpkg_resources(#2155). In particular, this largely speeds up thepygmentizescript when the lexer is not specified.importlib.metadatais only available in the Python standard library since Python 3.8. For older versions, there exists animportlib_metadatabackport on PyPI. For this reason, Pygments now defines a packaging extraplugins, which adds a requirement onimportlib_metadataif the Python version is older than 3.8. Thus, in order to install Pygments with optimal plugin support even for old Python versions, you should do::pip install pygments[plugins]
Pygments still falls back on
pkg_resourcesif neitherimportlib.metadatanorimportlib_metadatais found, but it will be slower. -
Silently ignore
BrokenPipeErrorin the command-line interface (#2193). -
The
HtmlFormatternow uses thelinespansattribute foranchorlinenosif thelineanchorsattribute is unset (#2026). -
The
highlight,lexandformatfunctions no longer wrongly report "argument must be a lexer/formatter instance, not a class" in some cases where this is not the actual problem (#2123). -
Fix warnings in doc build (#2124).
-
The
codetagifyfilter now recognizesFIXMEtags by default (#2150). -
The
pygmentizecommand now recognizes if theCOLORTERMenvironment variable is set to a value indicating that true-color support is available. In that case, it uses theTerminalTrueColorFormatterby default (#2160) -
Remove redundant caches for filename patterns (#2153)
-
Use new non-deprecated Pillow API for text bounding box in
ImageFormatter(#2198) -
Stop treating
DeprecationWarningsas errors in the unit tests (#2196)
v2.12.0
(released April 24th, 2022)
-
Added lexers:
-
Updated lexers:
-
Agda: Update keyword list (#2017)
-
C family: Fix identifiers after
casestatements (#2084) -
Clojure: Highlight ratios (#2042)
-
Csound: Update to 6.17 (#2064)
-
CSS: Update the list of properties (#2113)
-
Elpi:
-
Futhark: Add missing tokens (#2118)
-
Gherkin: Add
But(#2046) -
Inform6: Update to 6.36 (#2050)
-
Jinja2: add
.xxx.j2and.xxx.jinja2to relevant lexers (forxxx=html,xml, etc.) (#2103) -
JSON: Support C comments in JSON (#2049). Note: This doesn't mean the JSON parser now supports JSONC or JSON5 proper, just that it doesn't error out when seeing a
/* */or//style comment. If you need proper comment handling, consider using theJavaScriptlexer. -
LilyPond:
-
PHP: Update builtin function and keyword list (#2054, #2056)
-
Python: highlight
EncodingWarning(#2106) -
Savi: fix highlighting for underscore/private identifiers, add string interpolation (#2102); fix nested type name highlighting (#2110)
-
Scheme: Various improvements (#2060)
-
Spice: Update the keyword list, add new types (#2063, #2067)
-
Terraform:
-
-
Add
pluginsargument toget_all_lexers(). -
Bump minimal Python version to 3.6 (#2059)
-
Fix multiple lexers marking whitespace as
Text(#2025) -
Remove various redundant uses of
re.UNICODE(#2058) -
Associate
.resourcewith the Robot framework (#2047) -
Associate
.cljcwith Clojure (#2043) -
Associate
.tppwith C++ (#2031) -
Remove traces of Python 2 from the documentation (#2039)
-
The
nativestyle was updated to meet the WCAG AAA contrast guidelines (#2038) -
Fix various typos (#2030)
-
Fix
Groffformatter not inheriting token styles correctly (#2024) -
Various improvements to the CI (#2036)
-
The Ada lexer has been moved to a separate file (#2117)
-
When
linenos=tableis used, the<table>itself is now wrapped with a<div class="highlight">tag instead of placing it inside the<td class="code">cell (#632.) With this change, the output matches the documented behavior.
.. note::
If you have subclassed HtmlFormatter.wrap, you may have to adjust the logic.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
⚠ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
- any of the package files in this branch needs updating, or
- the branch becomes conflicted, or
- you click the rebase/retry checkbox if found above, or
- you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
File name: Pipfile.lock
Command failed: pipenv lock
Creating a virtualenv for this project...
Pipfile: /tmp/renovate/repos/github/peaceiris/mkdocs-material-boilerplate/Pipfile
Using /opt/containerbase/tools/python/3.10.14/bin/python (3.10.14) to create virtualenv...
created virtual environment CPython3.10.14.final.0-64 in 1801ms
creator CPython3Posix(dest=/tmp/renovate/cache/others/virtualenvs/mkdocs-material-boilerplate-xC_2CmLt, clear=False, no_vcs_ignore=False, global=False)
seeder FromAppData(download=False, pip=bundle, setuptools=bundle, wheel=bundle, via=copy, app_data_dir=/home/ubuntu/.local/share/virtualenv)
added seed packages: pip==24.0, setuptools==69.5.1, wheel==0.43.0
activators BashActivator,CShellActivator,FishActivator,NushellActivator,PowerShellActivator,PythonActivator
✔ Successfully created virtual environment!
Virtualenv location: /tmp/renovate/cache/others/virtualenvs/mkdocs-material-boilerplate-xC_2CmLt
Locking [packages] dependencies...
False
CRITICAL:pipenv.patched.pip._internal.resolution.resolvelib.factory:Cannot install -r /tmp/pipenv-d6m9dawq-requirements/pipenv-iffrfdj6-constraints.txt (line 6) and Pygments==2.15.0 because these package versions have conflicting dependencies.
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 645, in _main
[ResolutionFailure]: resolve_packages(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 612, in resolve_packages
[ResolutionFailure]: results, resolver = resolve(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 592, in resolve
[ResolutionFailure]: return resolve_deps(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 918, in resolve_deps
[ResolutionFailure]: results, hashes, internal_resolver = actually_resolve_deps(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 691, in actually_resolve_deps
[ResolutionFailure]: resolver.resolve()
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 448, in resolve
[ResolutionFailure]: raise ResolutionFailure(message=str(e))
[pipenv.exceptions.ResolutionFailure]: Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
You can use $ pipenv run pip install <requirement_name> to bypass this mechanism, then run $ pipenv graph to inspect the versions actually installed in the virtualenv.
Hint: try $ pipenv lock --pre if it is a pre-release dependency.
ERROR: ResolutionImpossible: for help visit https://pip.pypa.io/en/latest/topics/dependency-resolution/#dealing-with-dependency-conflicts
Traceback (most recent call last):
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/bin/pipenv", line 8, in <module>
sys.exit(cli())
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1157, in __call__
return self.main(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/cli/options.py", line 58, in main
return super().main(*args, **kwargs, windows_expand_args=False)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1078, in main
rv = self.invoke(ctx)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1688, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1434, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
return __callback(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/decorators.py", line 92, in new_func
return ctx.invoke(f, obj, *args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
return __callback(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/decorators.py", line 33, in new_func
return f(get_current_context(), *args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/cli/command.py", line 340, in lock
do_lock(
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/routines/lock.py", line 65, in do_lock
venv_resolve_deps(
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 859, in venv_resolve_deps
c = resolve(cmd, st, project=project)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 728, in resolve
raise RuntimeError("Failed to lock Pipfile.lock!")
RuntimeError: Failed to lock Pipfile.lock!
⚠️ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
- any of the package files in this branch needs updating, or
- the branch becomes conflicted, or
- you click the rebase/retry checkbox if found above, or
- you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
File name: Pipfile.lock
Command failed: pipenv lock
Creating a virtualenv for this project...
Pipfile: /tmp/renovate/repos/github/peaceiris/mkdocs-material-boilerplate/Pipfile
Using /opt/containerbase/tools/python/3.10.14/bin/python (3.10.14) to create virtualenv...
created virtual environment CPython3.10.14.final.0-64 in 3691ms
creator CPython3Posix(dest=/tmp/renovate/cache/others/virtualenvs/mkdocs-material-boilerplate-xC_2CmLt, clear=False, no_vcs_ignore=False, global=False)
seeder FromAppData(download=False, pip=bundle, setuptools=bundle, wheel=bundle, via=copy, app_data_dir=/home/ubuntu/.local/share/virtualenv)
added seed packages: pip==24.0, setuptools==69.5.1, wheel==0.43.0
activators BashActivator,CShellActivator,FishActivator,NushellActivator,PowerShellActivator,PythonActivator
✔ Successfully created virtual environment!
Virtualenv location: /tmp/renovate/cache/others/virtualenvs/mkdocs-material-boilerplate-xC_2CmLt
Locking [packages] dependencies...
False
CRITICAL:pipenv.patched.pip._internal.resolution.resolvelib.factory:Cannot install -r /tmp/pipenv-n4oufndp-requirements/pipenv-yl9ylwlp-constraints.txt (line 5) and Pygments==2.15.0 because these package versions have conflicting dependencies.
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 645, in _main
[ResolutionFailure]: resolve_packages(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 612, in resolve_packages
[ResolutionFailure]: results, resolver = resolve(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/resolver.py", line 592, in resolve
[ResolutionFailure]: return resolve_deps(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 918, in resolve_deps
[ResolutionFailure]: results, hashes, internal_resolver = actually_resolve_deps(
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 691, in actually_resolve_deps
[ResolutionFailure]: resolver.resolve()
[ResolutionFailure]: File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 448, in resolve
[ResolutionFailure]: raise ResolutionFailure(message=str(e))
[pipenv.exceptions.ResolutionFailure]: Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
You can use $ pipenv run pip install <requirement_name> to bypass this mechanism, then run $ pipenv graph to inspect the versions actually installed in the virtualenv.
Hint: try $ pipenv lock --pre if it is a pre-release dependency.
ERROR: ResolutionImpossible: for help visit https://pip.pypa.io/en/latest/topics/dependency-resolution/#dealing-with-dependency-conflicts
Traceback (most recent call last):
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/bin/pipenv", line 8, in <module>
sys.exit(cli())
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1157, in __call__
return self.main(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/cli/options.py", line 58, in main
return super().main(*args, **kwargs, windows_expand_args=False)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1078, in main
rv = self.invoke(ctx)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1688, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 1434, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
return __callback(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/decorators.py", line 92, in new_func
return ctx.invoke(f, obj, *args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
return __callback(*args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/vendor/click/decorators.py", line 33, in new_func
return f(get_current_context(), *args, **kwargs)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/cli/command.py", line 340, in lock
do_lock(
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/routines/lock.py", line 65, in do_lock
venv_resolve_deps(
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 859, in venv_resolve_deps
c = resolve(cmd, st, project=project)
File "/opt/containerbase/tools/pipenv/2023.12.1/3.10.14/lib/python3.10/site-packages/pipenv/utils/resolver.py", line 728, in resolve
raise RuntimeError("Failed to lock Pipfile.lock!")
RuntimeError: Failed to lock Pipfile.lock!
Renovate Ignore Notification
Because you closed this PR without merging, Renovate will ignore this update (==2.15.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.
If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.