-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
catchup: into long_lived/datalayer_merkle_blob from main @ 2b1aef889b4412d9637d77ae238ed5f64f44f674 #19105
Conversation
* convert a test reference string to a multiline string literal * stop overwriting `sys.stdout`
changed "is not belong" to "does not belong" in the `did_find_lost_did` endpoint when `derivation_record is None`, in wallet_rpc_api.py.
adding ca updates Co-authored-by: ChiaAutomation <automation@chia.net>
Update license
* put otherwise unheld tasks into the pit * and the rest too * cull less often * task referencer * private * report unexpectedly unreferenced tasks * also warn for automated catching in tests * reporting task * undo some * fixup for 3.9 * ban asyncio.create_task * oof * simplify including using `Task.add_done_callback()` for culling
Update dependabot
Bumps [click](https://github.com/pallets/click) from 8.1.7 to 8.1.8. - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.7...8.1.8) --- updated-dependencies: - dependency-name: click dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [boto3](https://github.com/boto/boto3) from 1.35.77 to 1.35.90. - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.35.77...1.35.90) --- updated-dependencies: - dependency-name: boto3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…221 (#19084) Bumps [types-aiofiles](https://github.com/python/typeshed) from 24.1.0.20240626 to 24.1.0.20241221. - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: types-aiofiles dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.11.10 to 3.11.11. - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.11.10...v3.11.11) --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…long_lived_datalayer_merkle_blob_from_main_2b1aef889b4412d9637d77ae238ed5f64f44f674
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: pypi/aiohttp@3.11.10, pypi/boto3@1.35.77, pypi/botocore@1.35.77, pypi/chiavdf@1.1.8, pypi/click@8.1.7, pypi/poetry@1.8.3, pypi/types-aiofiles@24.1.0.20240626 |
👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎ This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. Ignoring: Next stepsTake a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with |
@SocketSecurity ignore pypi/poetry@1.8.5 |
|
1c9e210
into
long_lived/datalayer_merkle_blob
Pull Request Test Coverage Report for Build 12601646276Details
💛 - Coveralls |
Source hash: 2b1aef8
Remaining commits: 0