chore(deps): update dependency gitpython to v3.1.41 #1982

renovate · 2024-01-04T13:02:02Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
gitpython	`==3.1.36` -> `==3.1.41`

Release Notes

gitpython-developers/GitPython (gitpython)

`v3.1.41`: - fix Windows security issue

Compare Source

The details about the Windows security issue can be found in this advisory.

Special thanks go to @EliahKagan who reported the issue and fixed it in a single stroke, while being responsible for an incredible amount of improvements that he contributed over the last couple of months ❤️.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

vercel · 2024-01-04T13:02:03Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
quivrapp	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jan 27, 2024 8:53pm

renovate · 2024-01-27T00:11:41Z

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Pipfile.lock

Command failed: pipenv lock
Creating a virtualenv for this project...
Pipfile: /tmp/renovate/repos/github/StanGirard/quivr/Pipfile
Using /opt/containerbase/tools/python/3.11.7/bin/python3 (3.11.7) to create virtualenv...
created virtual environment CPython3.11.7.final.0-64 in 738ms
  creator CPython3Posix(dest=/home/ubuntu/.local/share/virtualenvs/quivr-uw3T1ogQ, clear=False, no_vcs_ignore=False, global=False)
  seeder FromAppData(download=False, pip=bundle, setuptools=bundle, wheel=bundle, via=copy, app_data_dir=/home/ubuntu/.local/share/virtualenv)
    added seed packages: pip==23.3.1, setuptools==69.0.2, wheel==0.42.0
  activators BashActivator,CShellActivator,FishActivator,NushellActivator,PowerShellActivator,PythonActivator

✔ Successfully created virtual environment!
Virtualenv location: /home/ubuntu/.local/share/virtualenvs/quivr-uw3T1ogQ
Locking [packages] dependencies...
False
ERROR:pip.subprocessor:python setup.py egg_info exited with 1
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/resolver.py", line 645, in _main
[ResolutionFailure]:       resolve_packages(
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/resolver.py", line 612, in resolve_packages
[ResolutionFailure]:       results, resolver = resolve(
[ResolutionFailure]:       ^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/resolver.py", line 592, in resolve
[ResolutionFailure]:       return resolve_deps(
[ResolutionFailure]:       ^^^^^^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 918, in resolve_deps
[ResolutionFailure]:       results, hashes, internal_resolver = actually_resolve_deps(
[ResolutionFailure]:       ^^^^^^^^^^^^^^^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 691, in actually_resolve_deps
[ResolutionFailure]:       resolver.resolve()
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 448, in resolve
[ResolutionFailure]:       raise ResolutionFailure(message=str(e))
[pipenv.exceptions.ResolutionFailure]: Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv run pip install <requirement_name> to bypass this mechanism, then run $ pipenv graph to inspect the versions actually installed in the virtualenv.
  Hint: try $ pipenv lock --pre if it is a pre-release dependency.
ERROR: metadata generation failed

Traceback (most recent call last):
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/bin/pipenv", line 8, in <module>
    sys.exit(cli())
             ^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 1157, in __call__
    return self.main(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/cli/options.py", line 58, in main
    return super().main(*args, **kwargs, windows_expand_args=False)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 1078, in main
    rv = self.invoke(ctx)
         ^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 1688, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 1434, in invoke
    return ctx.invoke(self.callback, **ctx.params)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
    return __callback(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/decorators.py", line 92, in new_func
    return ctx.invoke(f, obj, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/core.py", line 783, in invoke
    return __callback(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/vendor/click/decorators.py", line 33, in new_func
    return f(get_current_context(), *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/cli/command.py", line 340, in lock
    do_lock(
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/routines/lock.py", line 65, in do_lock
    venv_resolve_deps(
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 859, in venv_resolve_deps
    c = resolve(cmd, st, project=project)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/containerbase/tools/pipenv/2023.11.17/3.11/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 728, in resolve
    raise RuntimeError("Failed to lock Pipfile.lock!")
RuntimeError: Failed to lock Pipfile.lock!

github-actions · 2024-04-27T00:18:59Z

Thanks for your contributions, we'll be closing this PR as it has gone stale. Feel free to reopen if you'd like to continue the discussion.

dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jan 4, 2024

renovate bot deployed to preview January 4, 2024 13:02 View deployment

dosubot bot added area: backend Related to backend functionality or under the /backend directory type: dependencies labels Jan 4, 2024

renovate bot force-pushed the renovate/gitpython-3.x branch from 36ae234 to 3bfa6c7 Compare January 10, 2024 13:16

renovate bot changed the title ~~chore(deps): update dependency gitpython to v3.1.40~~ chore(deps): update dependency gitpython to v3.1.41 Jan 10, 2024

renovate bot deployed to preview January 10, 2024 13:17 View deployment

renovate bot force-pushed the renovate/gitpython-3.x branch from 3bfa6c7 to fd97768 Compare January 27, 2024 00:11

renovate bot deployed to preview January 27, 2024 00:11 View deployment

chore(deps): update dependency gitpython to v3.1.41

f0fc9fa

renovate bot force-pushed the renovate/gitpython-3.x branch from fd97768 to f0fc9fa Compare January 27, 2024 20:51

renovate bot deployed to preview January 27, 2024 20:51 View deployment

github-actions bot added the Stale label Apr 27, 2024

github-actions bot closed this May 2, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency gitpython to v3.1.41 #1982

chore(deps): update dependency gitpython to v3.1.41 #1982

renovate bot commented Jan 4, 2024 •

edited

vercel bot commented Jan 4, 2024 •

edited

renovate bot commented Jan 27, 2024 •

edited

github-actions bot commented Apr 27, 2024

chore(deps): update dependency gitpython to v3.1.41 #1982

chore(deps): update dependency gitpython to v3.1.41 #1982

Conversation

renovate bot commented Jan 4, 2024 • edited

Release Notes

v3.1.41: - fix Windows security issue

What's Changed

New Contributors

v3.1.40: - fix downstream CI

What's Changed

v3.1.38

What's Changed

New Contributors

v3.1.37: - a proper fix CVE-2023-41040

What's Changed

Configuration

vercel bot commented Jan 4, 2024 • edited

renovate bot commented Jan 27, 2024 • edited

⚠ Artifact update problem

File name: Pipfile.lock

github-actions bot commented Apr 27, 2024

renovate bot commented Jan 4, 2024 •

edited

`v3.1.41`: - fix Windows security issue

`v3.1.40`: - fix downstream CI

`v3.1.38`

`v3.1.37`: - a proper fix CVE-2023-41040

vercel bot commented Jan 4, 2024 •

edited

renovate bot commented Jan 27, 2024 •

edited