Skip to content

Commit 5165bed

Browse files
deps: bump test PyYAML requirement to 6.0
In this patch we bump PyYAML requirement since version 6.0 has various vulnerability fixes (see [1-3]). Since PyYAML is used only in tests, the only reason of this patch is to remove Dependabot alerts. After migrating to GitHub Actions issue [4] is no longer relevant, so we are not restricted to using 5.2b1 version. There is no PyYAML 6.0 for Python 3.5 since it reached the end of its life on September 13th, 2020. So this patch removed Python 3.5 pipeline as well. 1. https://github.com/tarantool/tarantool-python/security/dependabot/1 2. https://github.com/tarantool/tarantool-python/security/dependabot/2 3. https://github.com/tarantool/tarantool-python/security/dependabot/3 4. 4f79627
1 parent 52dcc3d commit 5165bed

File tree

2 files changed

+2
-5
lines changed

2 files changed

+2
-5
lines changed

.github/workflows/testing.yml

+1-2
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,6 @@ jobs:
2727
- '2.8'
2828
- '2.x-latest'
2929
python:
30-
- '3.5'
3130
- '3.6'
3231
- '3.7'
3332
- '3.8'
@@ -118,7 +117,7 @@ jobs:
118117
- '1.10.11-0-gf0b0e7ecf-r470'
119118
- '2.8.3-21-g7d35cd2be-r470'
120119
- '2.10.0-1-gfa775b383-r486-linux-x86_64'
121-
python: ['3.5', '3.6', '3.7', '3.8', '3.9', '3.10']
120+
python: ['3.6', '3.7', '3.8', '3.9', '3.10']
122121

123122
steps:
124123
- name: Clone the connector

requirements-test.txt

+1-3
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,2 @@
11
dbapi-compliance==1.15.0
2-
# Use this pyyaml version to be compatible with Python34-x64 on Windows.
3-
# See for more details http://help.appveyor.com/discussions/problems/28023.
4-
pyyaml==5.2b1
2+
pyyaml==6.0

0 commit comments

Comments
 (0)