Safety CI > robertopreste/mitoviz

pyup-update-pandas-0.25.3-to-2.0.3

10 months, 1 week ago

Update pandas from 0.25.3 to 2.0.3

click 7.0, wheel 0.33.6 and 2 other dependencies have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-pandas-0.25.3-to-2.0.2

11 months, 1 week ago

ef973a20

Update pandas from 0.25.3 to 2.0.2

click 7.0, wheel 0.33.6 and 2 other dependencies have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-pandas-0.25.3-to-2.0.1

1 year ago

a7286455

Update pandas from 0.25.3 to 2.0.1

click 7.0, wheel 0.33.6 and 2 other dependencies have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-pandas-0.25.3-to-2.0.0

1 year ago

7c621b54

Update pandas from 0.25.3 to 2.0.0

click 7.0, wheel 0.33.6 and 2 other dependencies have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-pandas-0.25.3-to-1.5.3

1 year, 1 month ago

c6f96f0f

Update pandas from 0.25.3 to 1.5.3

click 7.0, wheel 0.33.6 and 2 other dependencies have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-wheel-0.33.6-to-0.40.0

1 year, 1 month ago

75012e31

Update wheel from 0.33.6 to 0.40.0

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-opencv-python-4.2.0.32-to-4.7.0.72

1 year, 2 months ago

4c5603c9

Update opencv-python from 4.2.0.32 to 4.7.0.72

click 7.0, wheel 0.33.6 and pytest-runner 6.0.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.0

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

wheel

0.33.6

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pytest-runner

6.0.0

>0

show

Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684.
It is recommended that you:
- Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option.
- Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option.
- Select a tool to bootstrap and then run tests such as tox.
https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst

pyup-update-opencv-python-4.2.0.32-to-4.7.0.68

1 year, 4 months ago

6649259c

Update opencv-python from 4.2.0.32 to 4.7.0.68

click 7.0, wheel 0.33.6 and pytest-runner 6.0.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.0

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

wheel

0.33.6

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pytest-runner

6.0.0

>0

show

Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684.
It is recommended that you:
- Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option.
- Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option.
- Select a tool to bootstrap and then run tests such as tox.
https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst

pyup-update-wheel-0.33.6-to-0.38.4

1 year, 5 months ago

471d5a1d

Update wheel from 0.33.6 to 0.38.4

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-wheel-0.33.6-to-0.38.3

1 year, 5 months ago

fd6e7787

Update wheel from 0.33.6 to 0.38.3

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-wheel-0.33.6-to-0.38.2

1 year, 5 months ago

2c3f810f

Update wheel from 0.33.6 to 0.38.2

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-wheel-0.33.6-to-0.38.1

1 year, 5 months ago

82b29b6f

Update wheel from 0.33.6 to 0.38.1

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-wheel-0.33.6-to-0.38.0

1 year, 6 months ago

36282a56

Update wheel from 0.33.6 to 0.38.0

click 7.0, pytest-runner 6.0.0 and opencv-python 4.2.0.32 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.0	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst
opencv-python	4.2.0.32	>=3.4.9.31,<4.8.1.78	show Opencv-python 4.8.1.78 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected. https://github.com/opencv/opencv-python/releases/tag/78
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'libpng' to v1.6.37 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'zlib' to v1.2.13 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its C dependency 'FFmpeg' to v5.1.2 to include a security fix.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show Opencv-python 4.7.0 updates its dependency 'OpenSSL' to v1.1.1s to include security fixes.
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 update its dependency 'openssl' to v1_1_1o to include security fixes.
opencv-python	4.2.0.32	<4.7.0	show OpenCV's wechat_qrcode module, specifically versions up to 4.7.0, has a significant vulnerability affecting the DecodedBitStreamParser::decodeHanziSegment function within the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability can cause a memory leak. The potential attack can be executed remotely. To rectify this issue, it's advisable to apply a patch named 2b62ff6181163eea029ed1cab11363b4996e9cd6. https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6
opencv-python	4.2.0.32	<3.4.18 , >=4.0.0,<4.6.0	show Opencv-python 3.4.18 and 4.6.0 pin its dependency 'freetype' to v2.12.1 to include a security fix.
opencv-python	4.2.0.32	<= 4.7.0	show The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely. https://github.com/opencv/opencv_contrib/pull/3480

pyup-update-opencv-python-4.2.0.32-to-4.6.0.66

1 year, 10 months ago

5e236212

Update opencv-python from 4.2.0.32 to 4.6.0.66

click 7.0 and pytest-runner 6.0.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.0

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

pytest-runner

6.0.0

>0

show

Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684.
It is recommended that you:
- Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option.
- Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option.
- Select a tool to bootstrap and then run tests such as tox.
https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst

pyup-update-click-7.0-to-8.1.2

2 years, 1 month ago

9b039e37

Update click from 7.0 to 8.1.2

pytest-runner 6.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pytest-runner	6.0.0	>0	show Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684. It is recommended that you: - Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option. - Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option. - Select a tool to bootstrap and then run tests such as tox. https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst

Package

Installed

Affected

Info

pytest-runner

6.0.0

>0

show

Pytest-runner depends on deprecated features of setuptools and relies on features that break security mechanisms in pip. For example ‘setup_requires’ and ‘tests_require’ bypass pip --require-hashes. See also pypa/setuptools#1684.
It is recommended that you:
- Remove 'pytest-runner' from your setup_requires, preferably removing the setup_requires option.
- Remove 'pytest' and any other testing requirements from tests_require, preferably removing the tests_requires option.
- Select a tool to bootstrap and then run tests such as tox.
https://github.com/pytest-dev/pytest-runner/blob/289a77b179535d8137118e3b8591d9e727130d6d/README.rst