Skip to content
This repository has been archived by the owner on Feb 6, 2024. It is now read-only.

Bump pyyaml from 5.3.1 to 5.4 #645

Closed
wants to merge 1 commit into from
Closed

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Mar 25, 2021

Bumps pyyaml from 5.3.1 to 5.4.

Changelog

Sourced from pyyaml's changelog.

5.4 (2021-01-19)

Commits
  • 58d0cb7 5.4 release
  • a60f7a1 Fix compatibility with Jython
  • ee98abd Run CI on PR base branch changes
  • ddf2033 constructor.timezone: _copy & deepcopy
  • fc914d5 Avoid repeatedly appending to yaml_implicit_resolvers
  • a001f27 Fix for CVE-2020-14343
  • fe15062 Add 3.9 to appveyor file for completeness sake
  • 1e1c7fb Add a newline character to end of pyproject.toml
  • 0b6b7d6 Start sentences and phrases for capital letters
  • c976915 Shell code improvements
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 25, 2021
@k8s-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
To complete the pull request process, please assign chases2 after the PR has been reviewed.
You can assign the PR to them by writing /assign @chases2 in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot
Copy link

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a bazelbuild member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@fejta
Copy link
Contributor

fejta commented Apr 30, 2021

/ok-to-test

@fejta
Copy link
Contributor

fejta commented May 3, 2021

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/pip/pyyaml-5.4 branch from 962a218 to 4140ea0 Compare May 3, 2021 18:54
@fejta
Copy link
Contributor

fejta commented May 4, 2021

/retest

@k8s-ci-robot
Copy link

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests:

Test name Commit Details Rerun command
pull-rules-k8s-e2e 4140ea0 link /test pull-rules-k8s-e2e

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

mishas added a commit to mishas/rules_k8s that referenced this pull request Oct 20, 2021
This PR takes care of a bunch of subtasks of bazelbuild#672
And also closes bazelbuild#587, bazelbuild#632, bazelbuild#645
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 10, 2022

Looks like pyyaml is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Jun 10, 2022
@dependabot dependabot bot deleted the dependabot/pip/pyyaml-5.4 branch June 10, 2022 19:51
mishas added a commit to mishas/rules_k8s that referenced this pull request Jun 16, 2022
This PR takes care of a bunch of subtasks of bazelbuild#672
And also closes bazelbuild#587, bazelbuild#632, bazelbuild#645
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file ok-to-test size/XS
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants