Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

force mistune to version 0.8.4 #43

Merged
merged 1 commit into from
Dec 10, 2021
Merged

Conversation

nhtzr
Copy link

@nhtzr nhtzr commented Dec 6, 2021

closes #42
closes #40

@kyluca
Copy link

kyluca commented Dec 7, 2021

Thanks for fixing this @nhtzr 😄 I hope it can be merged and released soon!

@CrossNox
Copy link
Owner

Sorry, totally missed the notification for this

@CrossNox CrossNox merged commit f8081fa into CrossNox:development Dec 10, 2021
@CrossNox
Copy link
Owner

Thanks for the PR!

CrossNox added a commit that referenced this pull request Dec 10, 2021
* force mistune to version 0.8.4 (#43)

closes #42 
closes #40

* pin

Co-authored-by: Ezequiel Rosas <nhtzr.rg@gmail.com>
qmonnet added a commit to qmonnet/openapi that referenced this pull request Aug 11, 2022
m2r is unmaintained [0]. It relies on mistune, but is not compatible with
mistune versions >= 2.0 [1]. This makes it impossible to update mistune,
even though there is a CVE in the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version.

[0] sphinx-contrib#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43
qmonnet added a commit to cilium/openapi that referenced this pull request Aug 11, 2022
m2r is unmaintained [0]. It relies on mistune, but is not compatible with
mistune versions >= 2.0 [1]. This makes it impossible to update mistune,
even though there is a CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43
qmonnet added a commit to qmonnet/cilium that referenced this pull request Aug 11, 2022
Sphinxcontrib-openapi relies on m2r. But m2r is unmaintained [0]. It
relies on mistune, but is not compatible with mistune versions >= 2.0
[1]. This makes it impossible to update mistune, even though there is a
CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib/openapi#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Signed-off-by: Quentin Monnet <quentin@isovalent.com>
CrossNox added a commit that referenced this pull request Aug 11, 2022
* force mistune to version 0.8.4 (#43)

closes #42 
closes #40

* pin

* Remove calls to ErrorString and SafeString removed in docutils 0.19 (#49)

* remove python2

* fix pipelines

* fix linter pipeline

* set language for sphinx

* fix tests pipeline

* fix pipeline, set docutiles dependency

* why did I change this

* bump

Co-authored-by: Ezequiel Rosas <nhtzr.rg@gmail.com>
Co-authored-by: Ian Glen <ian@ianglen.me>
tklauser pushed a commit to cilium/cilium that referenced this pull request Aug 17, 2022
Sphinxcontrib-openapi relies on m2r. But m2r is unmaintained [0]. It
relies on mistune, but is not compatible with mistune versions >= 2.0
[1]. This makes it impossible to update mistune, even though there is a
CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib/openapi#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Signed-off-by: Quentin Monnet <quentin@isovalent.com>
tklauser pushed a commit to tklauser/cilium that referenced this pull request Aug 17, 2022
[ upstream commit 4f893e8 ]

Sphinxcontrib-openapi relies on m2r. But m2r is unmaintained [0]. It
relies on mistune, but is not compatible with mistune versions >= 2.0
[1]. This makes it impossible to update mistune, even though there is a
CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib/openapi#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Signed-off-by: Quentin Monnet <quentin@isovalent.com>
Signed-off-by: Tobias Klauser <tobias@cilium.io>
aditighag pushed a commit to cilium/cilium that referenced this pull request Aug 22, 2022
[ upstream commit 4f893e8 ]

Sphinxcontrib-openapi relies on m2r. But m2r is unmaintained [0]. It
relies on mistune, but is not compatible with mistune versions >= 2.0
[1]. This makes it impossible to update mistune, even though there is a
CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib/openapi#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Signed-off-by: Quentin Monnet <quentin@isovalent.com>
Signed-off-by: Tobias Klauser <tobias@cilium.io>
qmonnet added a commit to qmonnet/openapi that referenced this pull request Aug 31, 2022
m2r is unmaintained [0]. It relies on mistune, but is not compatible with
mistune versions >= 2.0 [1]. This makes it impossible to update mistune,
even though there is a CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Fixes: sphinx-contrib#123
qmonnet added a commit to qmonnet/openapi that referenced this pull request Aug 31, 2022
m2r is unmaintained [0]. It relies on mistune, but is not compatible with
mistune versions >= 2.0 [1]. This makes it impossible to update mistune,
even though there is a CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Fixes: sphinx-contrib#123
stephenfin pushed a commit to qmonnet/openapi that referenced this pull request Dec 6, 2022
m2r is unmaintained [0]. It relies on mistune, but is not compatible with
mistune versions >= 2.0 [1]. This makes it impossible to update mistune,
even though there is a CVE in the old versions of the package [2].

Switch to sphinx-mdinclude instead.

There is also m2r2, but it is not a suitable alternative because they
simply force the use of an older mistune version [3].

[0] sphinx-contrib#123
[1] miyakogi/m2r#66
[2] GHSA-fw3v-x4f2-v673
[3] CrossNox/m2r2#43

Fixes: sphinx-contrib#123
CrossNox added a commit that referenced this pull request Jan 30, 2023
* force mistune to version 0.8.4 (#43)

closes #42 
closes #40

* pin

* Remove calls to ErrorString and SafeString removed in docutils 0.19 (#49)

* remove python2

* fix pipelines

* fix linter pipeline

* set language for sphinx

* fix tests pipeline

* fix pipeline, set docutiles dependency

* why did I change this

* bump

* Added python_requires to setup.py (#56)

* fix quotes

---------

Co-authored-by: Ezequiel Rosas <nhtzr.rg@gmail.com>
Co-authored-by: Ian Glen <ian@ianglen.me>
Co-authored-by: Martin Pecka <peci1@seznam.cz>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

New 'mistune' thrown no attribute 'BlockGrammar' Module 'mistune' has no attribute 'BlockGrammar'
3 participants