Skip to content

fix(deps): update pytest and Pygments in uv.lock - #20

Merged
shauneccles merged 1 commit into
mainfrom
fix/test-deps-security
Sep 27, 2026
Merged

shauneccles merged 1 commit into
mainfrom
fix/test-deps-security

Conversation

@shauneccles

Copy link
Copy Markdown
Member

Fixes the two open Dependabot alerts. Both are in test-only dependencies:

  • pytest 9.0.1 → 9.1.1 (alert: pytest <9.0.3, tmpdir handling, medium)
  • Pygments 2.19.2 → 2.21.0 (alert: Pygments <2.20.0, ReDoS, low; pulled in by pytest)

Both are the newest releases older than the 14-day exclude-newer window.

🤖 Generated with Claude Code

Dependabot alerts: pytest <9.0.3 (tmpdir handling, medium) and
Pygments <2.20.0 (ReDoS, low). Both are test-only.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@shauneccles
shauneccles enabled auto-merge (squash) September 27, 2026 16:06
@shauneccles
shauneccles merged commit a5ffd75 into main Sep 27, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant