Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump PyYAML to 5.1 for CVE-2017-18342 #902

Merged
merged 2 commits into from Mar 15, 2019
Merged

Conversation

dtkav
Copy link
Collaborator

@dtkav dtkav commented Mar 15, 2019

Fixes #901

Changes proposed in this pull request:

  • bump PyYAML to >=5.1
  • remove default_flow_style=False (now the default behavior in PyYAML 5.1)

Backwards incompatible changes: yaml/pyyaml#265

@dtkav dtkav changed the title WIP: bump PyYAML to 5.1 for CVE-2017-18342 bump PyYAML to 5.1 for CVE-2017-18342 Mar 15, 2019
@dtkav
Copy link
Collaborator Author

dtkav commented Mar 15, 2019

I've also opened a PR in python-openapi/openapi-spec-validator#69

@dtkav
Copy link
Collaborator Author

dtkav commented Mar 15, 2019

build is broken because of an isort release.
I've attempted to fix this in #903 , which applies all of the automatic isort fixes and pins the version in tox.ini.

@jmcs
Copy link
Contributor

jmcs commented Mar 15, 2019

👍

@jmcs jmcs merged commit d3d1836 into spec-first:master Mar 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants