Skip to content

chore(deps): bump pygments 2.19.2 → 2.20.0 (GHSA-5239-wwwm-4pmq)#23

Merged
WomB0ComB0 merged 1 commit intomainfrom
chore/bump-pygments-cve
Apr 15, 2026
Merged

chore(deps): bump pygments 2.19.2 → 2.20.0 (GHSA-5239-wwwm-4pmq)#23
WomB0ComB0 merged 1 commit intomainfrom
chore/bump-pygments-cve

Conversation

@WomB0ComB0
Copy link
Copy Markdown
Member

Fixes the only OSV-scanner finding on main.

🤖 Generated with Claude Code

Resolves the pygments vuln flagged by OSV-scanner on main.
@WomB0ComB0 WomB0ComB0 merged commit 2f97c07 into main Apr 15, 2026
17 of 18 checks passed
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 15, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • packages/resq-dsa/uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: f800243a-2260-486b-bef4-d76cd826d91e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/bump-pygments-cve

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@WomB0ComB0 WomB0ComB0 deleted the chore/bump-pygments-cve branch April 15, 2026 05:37
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the uv.lock file, upgrading the pygments package from version 2.19.2 to 2.20.0 and bumping the resq-dsa package version from 0.1.0 to 1.3.4. I have no feedback to provide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant