Update dependency PyYAML to v5.2 #1464

mend-for-github-com · 2021-07-02T13:57:40Z

This PR contains the following updates:

Package	Update	Change
PyYAML (source)	minor	`==5.1.2` -> `==5.2`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	9.8	CVE-2019-20477	#809

Release Notes

yaml/pyyaml

`v5.2`

Compare Source

Repair incompatibilities introduced with 5.1. The default Loader was changed,
but several methods like add_constructor still used the old default
A more flexible fix for custom tag constructors yaml/pyyaml#279 -- A more flexible fix for custom tag constructors
Change default loader for yaml.add_constructor yaml/pyyaml#287 -- Change default loader for yaml.add_constructor
Change default loader for add_implicit_resolver, add_path_resolver yaml/pyyaml#305 -- Change default loader for add_implicit_resolver, add_path_resolver
Make FullLoader safer by removing python/object/apply from the default FullLoader
Move constructor for object/apply to UnsafeConstructor yaml/pyyaml#347 -- Move constructor for object/apply to UnsafeConstructor
Fix bug introduced in 5.1 where quoting went wrong on systems with sys.maxunicode <= 0xffff
Fix logic for quoting special characters yaml/pyyaml#276 -- Fix logic for quoting special characters
Other PRs:
Update CHANGES for 5.1 yaml/pyyaml#280 -- Update CHANGES for 5.1

If you want to rebase/retry this PR, check this box.

cla-bot · 2021-07-02T13:57:41Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cortx-admin · 2021-07-02T14:05:06Z

Can one of the admins verify this patch?

cla-bot · 2021-07-05T09:50:11Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-06T05:22:16Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-06T07:44:25Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-07T08:01:38Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-08T14:14:32Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-09T06:53:16Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-09T09:45:19Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-09T13:26:04Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-13T16:36:06Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-20T04:56:56Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-23T07:03:13Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-23T07:17:38Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-23T09:16:33Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-23T12:34:55Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-23T18:16:43Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-07-30T08:32:35Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-04T04:59:40Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-09T07:29:58Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-09T10:36:57Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-10T08:24:50Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-12T08:59:36Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

cla-bot · 2021-08-16T06:32:48Z

Thanks for your contribution!
The CLA bot has flagged your contribution as not having a Contributor License Agreement
in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored.
The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning.
More information about this can be found here.

stale · 2021-08-23T10:08:35Z

This issue/pull request has been marked as needs attention as it has been left pending without new activity for 4 days. Tagging @83bhp @andkononykhin2 for appropriate assignment. Sorry for the delay & Thank you for contributing to CORTX. We will get back to you as soon as possible.

mend-for-github-com bot requested a review from 83bhp as a code owner July 2, 2021 13:57

mend-for-github-com bot requested a review from a user July 2, 2021 13:57

mend-for-github-com bot requested a review from nitin-seagate as a code owner July 2, 2021 13:57

mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Jul 2, 2021

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 9a138a5 to 0818d5c Compare July 5, 2021 09:50

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 0818d5c to 2f92cf2 Compare July 6, 2021 05:22

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 2f92cf2 to c24a60d Compare July 6, 2021 07:44

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from c24a60d to 4706bf3 Compare July 7, 2021 08:01

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 4706bf3 to 667f35e Compare July 8, 2021 14:14

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 667f35e to 33d3d5a Compare July 9, 2021 06:53

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 33d3d5a to 0876f64 Compare July 9, 2021 09:45

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 0876f64 to 13a1439 Compare July 9, 2021 13:26

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 13a1439 to c112fa6 Compare July 13, 2021 16:36

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from c112fa6 to 3c4ac5d Compare July 20, 2021 04:56

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 3c4ac5d to 2ee5136 Compare July 23, 2021 07:03

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 2ee5136 to c15c8ae Compare July 23, 2021 07:17

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from c15c8ae to 6f9775d Compare July 23, 2021 09:16

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 6f9775d to 3f6713e Compare July 23, 2021 12:34

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 3f6713e to f4f6420 Compare July 23, 2021 18:16

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from f4f6420 to 141d305 Compare July 30, 2021 08:32

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 141d305 to 9a2fbb5 Compare August 4, 2021 04:59

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 9a2fbb5 to 4f4e691 Compare August 9, 2021 07:29

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 4f4e691 to 7e10f53 Compare August 9, 2021 10:36

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 7e10f53 to 4a55b2d Compare August 10, 2021 08:24

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 4a55b2d to 68a2b6e Compare August 12, 2021 08:59

Update dependency PyYAML to v5.2

4de5f91

mend-for-github-com bot force-pushed the whitesource-remediate/pyyaml-5.x branch from 68a2b6e to 4de5f91 Compare August 16, 2021 06:32

stale bot added the needs-attention label Aug 23, 2021

83bhp closed this Oct 10, 2021

83bhp deleted the whitesource-remediate/pyyaml-5.x branch October 10, 2021 13:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency PyYAML to v5.2 #1464

Update dependency PyYAML to v5.2 #1464

mend-for-github-com bot commented Jul 2, 2021 •

edited

cla-bot bot commented Jul 2, 2021

cortx-admin commented Jul 2, 2021

cla-bot bot commented Jul 5, 2021

cla-bot bot commented Jul 6, 2021

cla-bot bot commented Jul 6, 2021

cla-bot bot commented Jul 7, 2021

cla-bot bot commented Jul 8, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 13, 2021

cla-bot bot commented Jul 20, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 30, 2021

cla-bot bot commented Aug 4, 2021

cla-bot bot commented Aug 9, 2021

cla-bot bot commented Aug 9, 2021

cla-bot bot commented Aug 10, 2021

cla-bot bot commented Aug 12, 2021

cla-bot bot commented Aug 16, 2021

stale bot commented Aug 23, 2021

Update dependency PyYAML to v5.2 #1464

Update dependency PyYAML to v5.2 #1464

Conversation

mend-for-github-com bot commented Jul 2, 2021 • edited

Release Notes

v5.2

cla-bot bot commented Jul 2, 2021

cortx-admin commented Jul 2, 2021

cla-bot bot commented Jul 5, 2021

cla-bot bot commented Jul 6, 2021

cla-bot bot commented Jul 6, 2021

cla-bot bot commented Jul 7, 2021

cla-bot bot commented Jul 8, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 9, 2021

cla-bot bot commented Jul 13, 2021

cla-bot bot commented Jul 20, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 23, 2021

cla-bot bot commented Jul 30, 2021

cla-bot bot commented Aug 4, 2021

cla-bot bot commented Aug 9, 2021

cla-bot bot commented Aug 9, 2021

cla-bot bot commented Aug 10, 2021

cla-bot bot commented Aug 12, 2021

cla-bot bot commented Aug 16, 2021

stale bot commented Aug 23, 2021

mend-for-github-com bot commented Jul 2, 2021 •

edited

`v5.2`