From e242b4eaea6493cf9fae3e49187f0e8652945634 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 2 Feb 2021 18:01:52 +0000 Subject: [PATCH] [Security] Bump bleach from 3.1.4 to 3.3.0 Bumps [bleach](https://github.com/mozilla/bleach) from 3.1.4 to 3.3.0. **This update includes a security fix.** - [Release notes](https://github.com/mozilla/bleach/releases) - [Changelog](https://github.com/mozilla/bleach/blob/master/CHANGES) - [Commits](https://github.com/mozilla/bleach/compare/v3.1.4...v3.3.0) Signed-off-by: dependabot-preview[bot] --- requirements-dev.txt | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 65c44416..d7a402c6 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -6,7 +6,7 @@ # appdirs==1.4.3 # via virtualenv -bleach==3.1.4 +bleach==3.3.0 # via readme-renderer certifi==2020.12.5 # via requests @@ -46,6 +46,8 @@ nodeenv==1.5.0 # via # -r requirements-dev.in # pre-commit +packaging==20.9 + # via bleach pkginfo==1.5.0.1 # via twine pre-commit==2.10.0 @@ -58,6 +60,8 @@ pyflakes==2.2.0 # via flake8 pygments==2.6.1 # via readme-renderer +pyparsing==2.4.7 + # via packaging pyyaml==5.4.1 # via # -r requirements-dev.in