Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: poetry.lock update #40

Merged
merged 2 commits into from
Mar 17, 2023
Merged

chore: poetry.lock update #40

merged 2 commits into from
Mar 17, 2023

Conversation

marcofavoritobi
Copy link
Contributor

@marcofavoritobi marcofavoritobi commented Mar 16, 2023

Proposed changes

This PR updates poetry.lock.

Tests do pass locally, so there should not be any dangerous consequences on the functionality of the package.

To reproduce:

poetry update

Output I got:

Package operations: 0 installs, 57 updates, 0 removals                                                                                                                                                                                                                                                           
                                                                                                                                                                                                                                                                                                                 
  • Updating platformdirs (2.6.2 -> 3.1.1)                                                                                                                                                                                                                                                                       
  • Updating fastjsonschema (2.16.2 -> 2.16.3)                                                                                                                                                                                                                                                                   
  • Updating pyzmq (25.0.0 -> 25.0.1)                                                                                                                                                                                                                                                                            
  • Updating jupyter-client (8.0.2 -> 8.0.3)                                                                                                                                                                                                                                                                     
  • Updating soupsieve (2.3.2.post1 -> 2.4)                                                                                                                                                                                                                                                                      
  • Updating beautifulsoup4 (4.11.1 -> 4.11.2)                                                                                                                                                                                                                                                                   
  • Updating mistune (2.0.4 -> 2.0.5)                                                                                                                                                                                                                                                                            
  • Updating python-json-logger (2.0.4 -> 2.0.7)                                                                                                                                                                                                                                                                 
  • Updating nbconvert (7.2.9 -> 7.2.10)                                                                                                                                                                                                                                                                         
  • Updating prompt-toolkit (3.0.36 -> 3.0.38)                                                                                                                                                                                                                                                                   
  • Updating websocket-client (1.5.0 -> 1.5.1)                                                                                                                                                                                                                                                                   
  • Updating ipython (8.9.0 -> 8.11.0)                                                                                                                                                                                                                                                                           
  • Updating jupyter-server (2.1.0 -> 2.4.0)                                                                                                                                                                                                                                                                     
  • Updating ipykernel (6.21.0 -> 6.21.3)                                                                                                                                                                                                                                                                        
  • Updating nbclassic (0.5.1 -> 0.5.3)                                                                                                                                                                                                                                                                          
  • Updating zipp (3.12.0 -> 3.15.0)                                                                                                                                                                                                                                                                             
  • Updating charset-normalizer (3.0.1 -> 3.1.0)                                                                                                                                                                                                                                                                 
  • Updating cryptography (39.0.0 -> 39.0.2)                                                                                                                                                                                                                                                                     
  • Updating more-itertools (9.0.0 -> 9.1.0)                                                                                                                                                                                                                                                                     
  • Updating notebook (6.5.2 -> 6.5.3)                                                                                                                                                                                                                                                                           
  • Updating urllib3 (1.26.14 -> 1.26.15)                                                                                                                                                                                                                                                                        
  • Updating watchdog (2.2.1 -> 2.3.1)                                                                                                                                                                                                                                                                           
  • Updating exceptiongroup (1.1.0 -> 1.1.1)                                                                                                                                                                                                                                                                     
  • Updating filelock (3.9.0 -> 3.10.0)                                                                                                                                                                                                                                                                          
  • Updating fonttools (4.38.0 -> 4.39.1)                                                                                                                                                                                                                                                                        
  • Updating jupyterlab-widgets (1.1.1 -> 1.1.2)                                                                                                                                                                                                                                                                 
  • Updating markdown-it-py (2.1.0 -> 2.2.0)                                                                                                                                                                                                                                                                     
  • Updating msgpack (1.0.4 -> 1.0.5)                                                                                                                                                                                                                                                                            
  • Updating python-slugify (8.0.0 -> 8.0.1)                                                                                                                                                                                                                                                                     
  • Updating scipy (1.10.0 -> 1.10.1)                                                                                                                                                                                                                                                                            
  • Updating tqdm (4.64.1 -> 4.65.0)                                                                                                                                                                                                                                                                             
  • Updating typing-extensions (4.4.0 -> 4.5.0)                                                                                                                                                                                                                                                                  
  • Updating widgetsnbextension (3.6.1 -> 3.6.2)                                                                                                                                                                                                                                                                 
  • Updating wrapt (1.14.1 -> 1.15.0)                                                                                                                                                                                                                                                                            
  • Updating xyzservices (2022.9.0 -> 2023.2.0)                                                                                                                                                                                                                                                                  
  • Updating astroid (2.13.3 -> 2.13.5)                                                                                                                                                                                                                                                                          
  • Updating bokeh (3.0.3 -> 3.1.0)                                                                                                                                                                                                                                                                              
  • Updating coverage (7.1.0 -> 7.2.1)                                                                                                                                                                                                                                                                           
  • Updating eradicate (2.1.0 -> 2.2.0)                                                                                                                                                                                                                                                                          
  • Updating gitpython (3.1.30 -> 3.1.31)                                                                                                                                                                                                                                                                        
  • Updating ipywidgets (7.7.2 -> 7.7.3)                                                                                                                                                                                                                                                                         
  • Updating jupyter-console (6.4.4 -> 6.6.3)                                                                                                                                                                                                                                                                    
  • Updating matplotlib (3.6.3 -> 3.7.1)                                                                                                                                                                                                                                                                         
  • Updating mypy-extensions (0.4.3 -> 1.0.0)                                                                                                                                                                                                                                                                    
  • Updating pathspec (0.11.0 -> 0.11.1)                                                                                                                                                                                                                                                                         
  • Updating pydantic (1.10.4 -> 1.10.6)                                                                                                                                                                                                                                                                         
  • Updating pytest (7.2.1 -> 7.2.2)                                                                                                                                                                                                                                                                             
  • Updating qtconsole (5.4.0 -> 5.4.1)                                                                                                                                                                                                                                                                          
  • Updating rich (13.3.1 -> 13.3.2)                                                                                                                                                                                                                                                                             
  • Updating setuptools (67.0.0 -> 67.6.0)                                                                                                                                                                                                                                                                       
  • Updating stevedore (4.1.1 -> 5.0.0)                                                                                                                                                                                                                                                                          
  • Updating virtualenv (20.17.1 -> 20.21.0)                                                                                                                                                                                                                                                                     
  • Updating bandit (1.7.4 -> 1.7.5)                                                                                                                                                                                                                                                                             
  • Updating hypothesis (6.65.2 -> 6.70.0)                                                                                                                                                                                                                                                                       
  • Updating nbmake (1.3.5 -> 1.4.1)                                                                                                                                                                                                                                                                             
  • Updating scikit-learn (1.2.1 -> 1.2.2)                                                                                                                                                                                                                                                                       
  • Updating xgboost (1.7.3 -> 1.7.4) 

Fixes

Besides the upgrade of the dependencies to their latest versions, compatible with the project, it addresses several security issues:

Types of changes

What types of changes does your code introduce?
Put an x in the boxes that apply

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

Put an x in the boxes that apply.

  • I have read the CONTRIBUTING doc
  • I am making a pull request against the develop branch (left side). Also you should start your branch off our develop.
  • Lint and unit tests pass locally with my changes
  • I have added tests that prove my fix is effective or that my feature works

Further comments

n/a

To reproduce the changes: `poetry update`.

Output:

```
Package operations: 0 installs, 57 updates, 0 removals

  • Updating platformdirs (2.6.2 -> 3.1.1)
  • Updating fastjsonschema (2.16.2 -> 2.16.3)
  • Updating pyzmq (25.0.0 -> 25.0.1)
  • Updating jupyter-client (8.0.2 -> 8.0.3)
  • Updating soupsieve (2.3.2.post1 -> 2.4)
  • Updating beautifulsoup4 (4.11.1 -> 4.11.2)
  • Updating mistune (2.0.4 -> 2.0.5)
  • Updating python-json-logger (2.0.4 -> 2.0.7)
  • Updating nbconvert (7.2.9 -> 7.2.10)
  • Updating prompt-toolkit (3.0.36 -> 3.0.38)
  • Updating websocket-client (1.5.0 -> 1.5.1)
  • Updating ipython (8.9.0 -> 8.11.0)
  • Updating jupyter-server (2.1.0 -> 2.4.0)
  • Updating ipykernel (6.21.0 -> 6.21.3)
  • Updating nbclassic (0.5.1 -> 0.5.3)
  • Updating zipp (3.12.0 -> 3.15.0)
  • Updating charset-normalizer (3.0.1 -> 3.1.0)
  • Updating cryptography (39.0.0 -> 39.0.2)
  • Updating more-itertools (9.0.0 -> 9.1.0)
  • Updating notebook (6.5.2 -> 6.5.3)
  • Updating urllib3 (1.26.14 -> 1.26.15)
  • Updating watchdog (2.2.1 -> 2.3.1)
  • Updating exceptiongroup (1.1.0 -> 1.1.1)
  • Updating filelock (3.9.0 -> 3.10.0)
  • Updating fonttools (4.38.0 -> 4.39.1)
  • Updating jupyterlab-widgets (1.1.1 -> 1.1.2)
  • Updating markdown-it-py (2.1.0 -> 2.2.0)
  • Updating msgpack (1.0.4 -> 1.0.5)
  • Updating python-slugify (8.0.0 -> 8.0.1)
  • Updating scipy (1.10.0 -> 1.10.1)
  • Updating tqdm (4.64.1 -> 4.65.0)
  • Updating typing-extensions (4.4.0 -> 4.5.0)
  • Updating widgetsnbextension (3.6.1 -> 3.6.2)
  • Updating wrapt (1.14.1 -> 1.15.0)
  • Updating xyzservices (2022.9.0 -> 2023.2.0)
  • Updating astroid (2.13.3 -> 2.13.5)
  • Updating bokeh (3.0.3 -> 3.1.0)
  • Updating coverage (7.1.0 -> 7.2.1)
  • Updating eradicate (2.1.0 -> 2.2.0)
  • Updating gitpython (3.1.30 -> 3.1.31)
  • Updating ipywidgets (7.7.2 -> 7.7.3)
  • Updating jupyter-console (6.4.4 -> 6.6.3)
  • Updating matplotlib (3.6.3 -> 3.7.1)
  • Updating mypy-extensions (0.4.3 -> 1.0.0)
  • Updating pathspec (0.11.0 -> 0.11.1)
  • Updating pydantic (1.10.4 -> 1.10.6)
  • Updating pytest (7.2.1 -> 7.2.2)
  • Updating qtconsole (5.4.0 -> 5.4.1)
  • Updating rich (13.3.1 -> 13.3.2)
  • Updating setuptools (67.0.0 -> 67.6.0)
  • Updating stevedore (4.1.1 -> 5.0.0)
  • Updating virtualenv (20.17.1 -> 20.21.0)
  • Updating bandit (1.7.4 -> 1.7.5)
  • Updating hypothesis (6.65.2 -> 6.70.0)
  • Updating nbmake (1.3.5 -> 1.4.1)
  • Updating scikit-learn (1.2.1 -> 1.2.2)
  • Updating xgboost (1.7.3 -> 1.7.4)
```
@codecov-commenter
Copy link

Codecov Report

Merging #40 (aee868d) into main (3e09454) will increase coverage by 0.05%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main      #40      +/-   ##
==========================================
+ Coverage   96.75%   96.81%   +0.05%     
==========================================
  Files          30       30              
  Lines        1512     1506       -6     
==========================================
- Hits         1463     1458       -5     
+ Misses         49       48       -1     

see 7 files with indirect coverage changes

Copy link

@muxator muxator left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@muxator muxator merged commit 42dfa21 into main Mar 17, 2023
@muxator muxator deleted the fix/security branch March 17, 2023 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants