Bump black, ipython in poetry verification test resources#1666
Bump black, ipython in poetry verification test resources#1666JamieMagee merged 2 commits intomainfrom
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates dev dependencies in the poetry verification test fixture to address a security vulnerability and modernize dependency versions. The changes affect test resources used by VerificationTest.ps1 to validate the poetry detector's functionality against real-world package configurations.
Changes:
- Bumps black from ^21.10b0 to ^24.3.0 (lock file: 21.12b0 → 24.10.0)
- Bumps ipython from ^7.7 to ^8.10 (lock file: 7.16.3 → 8.31.0) to fix CVE-2023-24816 arbitrary code execution vulnerability
- Updates transitive dependencies in poetry.lock (py, pydantic, pygments, zipp)
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| test/Microsoft.ComponentDetection.VerificationTests/resources/poetry/pyproject.toml | Updates black and ipython version constraints in dev-dependencies |
| test/Microsoft.ComponentDetection.VerificationTests/resources/poetry/poetry.lock | Regenerated lock file with updated versions of black, ipython, and their transitive dependencies |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1666 +/- ##
=======================================
- Coverage 90.8% 90.8% -0.1%
=======================================
Files 451 451
Lines 40148 40148
Branches 2443 2443
=======================================
- Hits 36461 36460 -1
Misses 3188 3188
- Partials 499 500 +1 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
👋 Hi! It looks like you modified some files in the
If none of the above scenarios apply, feel free to ignore this comment 🙂 |
Bumps dev dependencies in the poetry verification test fixture:
The old ipython version has an arbitrary code execution vulnerability (CVE-2023-24816).