Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
e348410
Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15…
v-aparnajyothi-y Apr 11, 2025
6ed2c67
Fix for Candidate Not Iterable Error (#1082)
v-aparnajyothi-y Apr 17, 2025
5d95bc1
Bump semver and @types/semver (#1091)
dependabot[bot] Apr 22, 2025
30eafe9
Bump prettier from 2.8.8 to 3.5.3 (#1046)
dependabot[bot] Apr 22, 2025
a26af69
Bump ts-jest from 29.1.2 to 29.3.2 (#1081)
dependabot[bot] Apr 24, 2025
5db1cf9
Enhance reading from .python-version (#787)
krystof-k May 21, 2025
5fa0ee6
Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#1095)
dependabot[bot] Jun 18, 2025
e9c40fb
Add support for `pip-version` (#1129)
v-priyagupta108 Jun 20, 2025
1264885
Enhance cache-dependency-path handling to support files outside the w…
v-aparnajyothi-y Jun 25, 2025
532b046
Add Architecture-Specific PATH Management for Python with --user Flag…
v-aparnajyothi-y Jul 3, 2025
88ffd4d
Include python version in PyPy python-version output (#1110)
cdce8p Jul 21, 2025
3c6f142
update documentation (#1156)
v-priya-kinthali Jul 23, 2025
36da51d
Add version parsing from Pipfile (#1067)
aradkdj Jul 24, 2025
03bb615
Bump idna from 2.9 to 3.7 in /__tests__/data (#843)
dependabot[bot] Jul 29, 2025
fbeb884
Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)
v-aparnajyothi-y Jul 30, 2025
9322b3c
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in P…
v-aparnajyothi-y Aug 4, 2025
f62a0e2
Change missing cache directory error to warning (#1182)
v-aparnajyothi-y Aug 26, 2025
5b668cf
Bump actions/checkout from 4 to 5 (#1181)
dependabot[bot] Aug 26, 2025
65b0712
Clarify pythonLocation behavior for PyPy and GraalPy in environment v…
v-aparnajyothi-y Aug 26, 2025
3d1e2d2
Revert "Enhance cache-dependency-path handling to support files outsi…
v-aparnajyothi-y Aug 28, 2025
e797f83
Upgrade to node 24 (#1164)
salmanmkc Sep 4, 2025
4267e28
Bump urllib3 from 1.26.19 to 2.5.0 in /__tests__/data and document br…
dependabot[bot] Sep 18, 2025
2e3e4b1
Add support for pip-install input (#1201)
v-gowridurgad Sep 26, 2025
18566f8
Improve wording and "fix example" (remove 3.13) on testing against pr…
yarikoptic Oct 14, 2025
bba65e5
Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md…
dependabot[bot] Oct 20, 2025
cfd55ca
graalpy: add graalpy early-access and windows builds (#880)
timfel Oct 22, 2025
443da59
Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation updat…
dependabot[bot] Nov 12, 2025
97aeb3e
Bump requests from 2.32.2 to 2.32.4 in /__tests__/data (#1130)
dependabot[bot] Nov 13, 2025
bfc4944
Bump prettier from 3.5.3 to 3.6.2 (#1234)
dependabot[bot] Nov 18, 2025
83679a8
Bump @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-1…
dependabot[bot] Nov 24, 2025
4f41a90
Bump urllib3 from 2.5.0 to 2.6.0 in /__tests__/data (#1253)
dependabot[bot] Dec 30, 2025
bfe8cc5
Upgrade @actions dependencies to Node 24 compatible versions (#1259)
salmanmkc Jan 20, 2026
a309ff8
Bump urllib3 from 2.6.0 to 2.6.3 in /__tests__/data (#1264)
dependabot[bot] Jan 22, 2026
918d5f3
Merge tag 'v6.2.0' into sync/upstream-v6.2.0
guptaankit015 Mar 26, 2026
80339e6
chore: rebuild dist and lockfile after upstream sync
guptaankit015 Mar 26, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in P…
…ackageIndex.download (actions#1165)

* fix  actions#174

* npm audit fix
  • Loading branch information
v-aparnajyothi-y authored Aug 4, 2025
commit 9322b3ca74000aeb2c01eb777b646334015ddd72
51 changes: 35 additions & 16 deletions __tests__/data/poetry.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 3 additions & 3 deletions __tests__/data/pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -5,13 +5,13 @@ description = ""
authors = ["Your Name <you@example.com>"]

[tool.poetry.dependencies]
python = ">=3.8,<3.14"
python = ">=3.9,<3.14"
flake8 = "^4.0.1"
pyinstaller = "6.10.0"

setuptools = ">=78.1.1"

[tool.poetry.dev-dependencies]

[build-system]
requires = ["poetry-core>=1.0.0"]
build-backend = "poetry.core.masonry.api"
build-backend = "poetry.core.masonry.api"