Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Black to v24.3.0 & fix warnings in the pipelines #295

Merged
merged 4 commits into from
Apr 9, 2024

Conversation

evgkirov
Copy link
Collaborator

@evgkirov evgkirov commented Mar 23, 2024

Description

black before 24.3.0 contains CVE-2024-21503

Although we're not actually affected by this vulnerability as we don’t run black on untrusted code, it's better to have it updated rather than not.


GitHub Actions were updated:

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-python@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

Checklist

@evgkirov evgkirov changed the title Black 24.3.0 Update Black to 24.3.0 Mar 23, 2024
@evgkirov evgkirov changed the title Update Black to 24.3.0 Update Black to v24.3.0 Mar 23, 2024
@evgkirov evgkirov marked this pull request as draft March 23, 2024 18:44
@evgkirov evgkirov marked this pull request as ready for review April 9, 2024 11:52
fixes this warning:

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-python@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
@evgkirov evgkirov changed the title Update Black to v24.3.0 Update Black to v24.3.0 & fix warnings in the pipelines Apr 9, 2024
@evgkirov evgkirov merged commit 114d177 into main Apr 9, 2024
33 checks passed
@evgkirov evgkirov deleted the bugfix/update_black branch April 9, 2024 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants