Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit 39b5be0

Browse files
committedJul 19, 2022
deps: bump test PyYAML requirement to 6.0
In this patch we bump PyYAML requirement since version 6.0 has various vulnerability fixes (see [1-3]). Since PyYAML is used only in tests, the only reason of this patch is to remove Dependabot alerts. After migrating to GitHub Actions issue [4] is no longer relevant, so we are not restricted to using 5.2b1 version. There is no PyYAML 6.0 for Python 3.5 since it reached the end of its life on September 13th, 2020. So this patch removed Python 3.5 pipeline as well. 1. https://github.com/tarantool/tarantool-python/security/dependabot/1 2. https://github.com/tarantool/tarantool-python/security/dependabot/2 3. https://github.com/tarantool/tarantool-python/security/dependabot/3 4. 4f79627
1 parent 1b3a083 commit 39b5be0

File tree

2 files changed

+2
-5
lines changed

2 files changed

+2
-5
lines changed
 

‎.github/workflows/testing.yml

+1-2
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,6 @@ jobs:
2727
- '2.8'
2828
- '2.x-latest'
2929
python:
30-
- '3.5'
3130
- '3.6'
3231
- '3.7'
3332
- '3.8'
@@ -123,7 +122,7 @@ jobs:
123122
- '1.10.11-0-gf0b0e7ecf-r470'
124123
- '2.8.3-21-g7d35cd2be-r470'
125124
- '2.10.0-1-gfa775b383-r486-linux-x86_64'
126-
python: ['3.5', '3.6', '3.7', '3.8', '3.9', '3.10']
125+
python: ['3.6', '3.7', '3.8', '3.9', '3.10']
127126
msgpack-deps:
128127
# latest msgpack will be installed as a part of requirements.txt
129128
- ''

‎requirements-test.txt

+1-3
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,2 @@
11
dbapi-compliance==1.15.0
2-
# Use this pyyaml version to be compatible with Python34-x64 on Windows.
3-
# See for more details http://help.appveyor.com/discussions/problems/28023.
4-
pyyaml==5.2b1
2+
pyyaml==6.0

0 commit comments

Comments
 (0)
Please sign in to comment.