Skip to content

Commit a90d6f7

Browse files
TKaltofenTomKaltofen
authored andcommitted
chore(deps): bump pymdown-extensions to 11.0.1 via uv override
marimo pins pymdown-extensions<11 and the fix for the b64 extension path-traversal advisory ships only in 11.0, so a constraint cannot reach it. Override the pin in [tool.uv] until marimo allows 11.x.
1 parent f310090 commit a90d6f7

2 files changed

Lines changed: 12 additions & 3 deletions

File tree

pyproject.toml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,3 +63,9 @@ exclude_dirs = [".tox", ".venv", "tests"]
6363
[tool.uv]
6464
exclude-newer = "7 days"
6565
exclude-newer-package = { mloda = "2026-12-31", "mloda-testing" = "2026-12-31", "mloda-registry" = "2026-12-31" }
66+
# Overrides, not constraints: marimo pins `pymdown-extensions<11`, and the fix for the
67+
# b64 path-traversal advisory only ships in 11.0. A constraint cannot beat that upper
68+
# pin, so the pin is overridden here. Drop this once marimo allows 11.x.
69+
override-dependencies = [
70+
"pymdown-extensions>=11.0.1",
71+
]

uv.lock

Lines changed: 6 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)