Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 3, 2025

Bumps virtualenv from 20.25.0 to 20.26.6.

Release notes

Sourced from virtualenv's releases.

20.26.6

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.26.5...20.26.6

20.26.5

What's Changed

Full Changelog: pypa/virtualenv@20.26.4...20.26.5

20.26.4

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.26.3...20.26.4

20.26.3

What's Changed

Full Changelog: pypa/virtualenv@20.26.2...20.26.3

20.26.2

... (truncated)

Changelog

Sourced from virtualenv's changelog.

v20.26.6 (2024-09-27)

Bugfixes - 20.26.6

- Properly quote string placeholders in activation script templates to mitigate
  potential command injection - by :user:`y5c4l3`. (:issue:`2768`)

v20.26.5 (2024-09-17)

Bugfixes - 20.26.5

  • Upgrade embedded wheels: setuptools to 75.1.0 from 74.1.2 - by :user:gaborbernat. (:issue:2765)

v20.26.4 (2024-09-07)

Bugfixes - 20.26.4

- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`)
- Upgrade embedded wheels:
  • wheel to 0.44.0 from 0.43.0
  • pip to 24.2 from 24.1
  • setuptools to 74.1.2 from 70.1.0 (:issue:2760)

v20.26.3 (2024-06-21)

Bugfixes - 20.26.3

  • Upgrade embedded wheels:

    • setuptools to 70.1.0 from 69.5.1
    • pip to 24.1 from 24.0 (:issue:2741)

v20.26.2 (2024-05-13)

Bugfixes - 20.26.2

- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`)
- Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`)

v20.26.1 (2024-04-29)

Bugfixes - 20.26.1

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

c00kiemon5ter and others added 30 commits April 18, 2021 17:15
…_missing_friendly_name

Fix crash when applying policy on RequestedAttribute without a friendlyName
travis-ci.org is shutting down in several weeks, with all accounts migrating to travis-ci.com.
This repository was already migrated to travis-ci.com, so update the badge to reflect that.
Always use base64.encodebytes; base64.encodestring has been dropped
Update Travis CI badge from travis-ci.org to travis-ci.com
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
…hibboleth SP 3

- Fixed: "ERROR Shibboleth.SSO.SAML2 [6] [default]: failed to decrypt assertion: Unable to resolve any key decryption keys."
- Fixed: "WARN XMLTooling.Decrypter [7] [default]: XMLSecurity exception while decrypting key: XSECAlgorithmMapper::mapURIToHandler - URI http://www.w3.org/2001/04/xmlenc#rsa-1_5 disallowed by whitelist/blacklist policy"
Signed-off-by: Ivan Kanakarakis <[email protected]>
Consider:
- what the IdP supports
- what the SP prefers
- the expected binding

Find the common set and select the first preferred choice.
Then do the logout.

Signed-off-by: Ivan Kanakarakis <[email protected]>
timofey-barmin and others added 28 commits June 9, 2023 11:42
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
This fixes IdentityPython#899.
When packaging saml2 downstream with pyproject RPM macros,
the utility module is installed. This might clash with other
modules.
Made error message more descriptive

Co-authored-by: Ivan Kanakarakis <[email protected]>
…gver_fail_error_log

Set error log message when assertion signature verification fails
Signed-off-by: Ivan Kanakarakis <[email protected]>
errorURL can be used to redirect a user's browser in the event of a failure.
Most part of this exist already in this project. But was not exposed in the
metadata generated from the configuration.
User:password combination have been updated to reflect the code.
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Signed-off-by: Ivan Kanakarakis <[email protected]>
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.25.0 to 20.26.6.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.25.0...20.26.6)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.