[ckan-changes] [ckan/ckan] 0481af: Upgrade PyYaml

David Read noreply at github.com
Fri May 24 21:25:47 UTC 2019


  Branch: refs/heads/pyyaml-upgrade
  Home:   https://github.com/ckan/ckan
  Commit: 0481af486268e9e316f68dd08dd5c37ad95cec7d
      https://github.com/ckan/ckan/commit/0481af486268e9e316f68dd08dd5c37ad95cec7d
  Author: David Read <david.read at hackneyworkshop.com>
  Date:   2019-05-24 (Fri, 24 May 2019)

  Changed paths:
    M requirements.in
    M requirements.txt

  Log Message:
  -----------
  Upgrade PyYaml

* PyYaml needs upgrading due to security concern.
* PyYaml is used by webassets and it seems fine with the latest version, according to:
  https://github.com/miracle2k/webassets/blob/e3e82114324ffd6cf1a2877976a1de08c515eb10/requirements-dev.pip
* PyYaml was only just introduced to CKAN in webassets PR https://github.com/ckan/ckan/pull/4614
  However it was added to requirements.txt not .in, so I fixed that too.
* Regenerating requirements.in adds a few minor things along the way.




More information about the ckan-changes mailing list