Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump pytest-html from 3.2.0 to 4.1.1 in /tests #4637

Closed
wants to merge 2 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 13, 2023

Bumps pytest-html from 3.2.0 to 4.1.1.

Release notes

Sourced from pytest-html's releases.

4.1.1

Changes

4.1.0

Changes

v4.0.2

Changes

v4.0.1

Changes

v4.0.0

Changes

... (truncated)

Changelog

Sourced from pytest-html's changelog.

4.1.1 (2023-11-07)


* Fix original initial sort INI-setting.
  • Thanks to @sturmf <https://github.com/sturmf>_ for reporting.

4.1.0 (2023-11-04)

  • Fix typo ("ge" instead of "get") in green Reload button in report file.

  • Fix results table modification documentation.

    • Thanks to @michalkaptur <https://github.com/michalkaptur>_ for the reporting and PR.
  • Fix broken duration.

  • Revert report generation to full run.

  • Add collections errors to report.

  • Fix escaping HTML in the log.

4.0.2 (2023-09-12)


* Use absolute path to the report file.
  • Thanks to @adrien-berchet &lt;https://github.com/adrien-berchet&gt;_ for reporting and for the PR.

4.0.1 (2023-09-10)

  • Fix incorrectly labeled outcome.

    • Thanks to @lodagro <https://github.com/lodagro>_ for reporting

4.0.0 (2023-09-01)


This release is the result of more than two years of rewrites.

We've tried our best to keep this release backwards-compatible with v3.

If you find something that seems to be a regression, please consult the documentation first, before filing an issue.

Thanks to all the users who have contributed with ideas, solutions and beta-testing. You're too many to name, but you know who you are. </tr></table>

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from a team as a code owner November 13, 2023 09:42
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 13, 2023
Copy link

codecov bot commented Nov 13, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (4590ce5) 52.31% compared to head (ecc8427) 52.31%.
Report is 3 commits behind head on main.

❗ Current head ecc8427 differs from pull request most recent head 3644cf4. Consider uploading reports for the commit 3644cf4 to get more accurate results

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #4637   +/-   ##
=======================================
  Coverage   52.31%   52.31%           
=======================================
  Files          60       60           
  Lines       17501    17501           
=======================================
  Hits         9155     9155           
  Misses       8018     8018           
  Partials      328      328           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot dependabot bot force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch 2 times, most recently from 61ec581 to da5a887 Compare November 13, 2023 14:42
@dependabot dependabot bot force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch from da5a887 to 2853e58 Compare November 21, 2023 10:29
@pdabelf5
Copy link
Collaborator

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch 4 times, most recently from 8cfd0f2 to 736d1ed Compare November 27, 2023 11:52
@pdabelf5 pdabelf5 mentioned this pull request Nov 29, 2023
6 tasks
@dependabot dependabot bot force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch from 736d1ed to d39947e Compare November 29, 2023 17:39
Copy link

github-actions bot commented Nov 30, 2023

Dependency Review

The following issues were found:
  • ❌ 1 vulnerable package(s)
  • ❌ 1 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

tests/requirements.txt

NameVersionVulnerabilitySeverity
jinja23.1.2Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filtermoderate

License Issues

tests/requirements.txt

PackageVersionLicenseIssue Type
markupsafe2.1.3BSD-2-Clause AND BSD-3-ClauseIncompatible License
pytest-html4.1.1NullUnknown License
Allowed Licenses: Apache-1.1, Apache-2.0, BSD-2-Clause, BSD-3-Clause, BSL-1.0, ISC, MIT, NCSA, OpenSSL, Python-2.0, X11

Scanned Manifest Files

tests/requirements.txt

@pdabelf5
Copy link
Collaborator

pdabelf5 commented Dec 7, 2023

@pdabelf5 pdabelf5 force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch from 9221038 to ecc8427 Compare January 16, 2024 09:39
Bumps [pytest-html](https://github.com/pytest-dev/pytest-html) from 3.2.0 to 4.1.1.
- [Release notes](https://github.com/pytest-dev/pytest-html/releases)
- [Changelog](https://github.com/pytest-dev/pytest-html/blob/master/docs/changelog.rst)
- [Commits](pytest-dev/pytest-html@v3.2.0...4.1.1)

---
updated-dependencies:
- dependency-name: pytest-html
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@pdabelf5 pdabelf5 force-pushed the dependabot/pip/tests/pytest-html-4.1.1 branch from ecc8427 to f3520fb Compare January 22, 2024 10:12
@pdabelf5 pdabelf5 closed this Jan 23, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 23, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@pdabelf5 pdabelf5 deleted the dependabot/pip/tests/pytest-html-4.1.1 branch January 23, 2024 11:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants