Skip to content

Commit 3e40e5c

Browse files
authored
Fix Dependabot alerts: bump black and pytest (#32)
* Bump black to 26.3.1 and pytest to 9.0.3 to fix Dependabot alerts Resolves GHSA-3936-cmfr-pm3m (black arbitrary file writes, high) and GHSA-6w46-j5rx-g56g (pytest tmpdir handling, medium). black 26.x requires Python >=3.10, so requires-python is bumped accordingly (CI already runs 3.13). * Tidy pyproject.toml: fix author name and inline dev deps * Bump Python to 3.14 - requires-python >=3.14 - black target-version py314 - CI runs on Python 3.14
1 parent 07335f8 commit 3e40e5c

3 files changed

Lines changed: 49 additions & 173 deletions

File tree

.github/workflows/testing.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,8 +18,8 @@ jobs:
1818
with:
1919
enable-cache: true
2020

21-
- name: Set up Python 3.13
22-
run: uv python install 3.13
21+
- name: Set up Python 3.14
22+
run: uv python install 3.14
2323

2424
- name: Install dependencies
2525
run: uv sync

pyproject.toml

Lines changed: 4 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,25 +3,20 @@ name = "interview-task"
33
version = "0.1.0"
44
description = "Задачки с собеседований, LeetCode, CodeWars (решаю их на Python)"
55
readme = "README.md"
6-
requires-python = ">=3.9"
6+
requires-python = ">=3.14"
77
license = { text = "MIT" }
8-
authors = [{ name = "Michael Savin", email = "jtprogru@gmail.com" }]
8+
authors = [{ name = "Mikhail Savin", email = "jtprogru@gmail.com" }]
99
dependencies = []
1010

1111
[dependency-groups]
12-
dev = [
13-
"black==25.1.0",
14-
"flake8==7.1.2",
15-
"isort==6.0.1",
16-
"pytest==8.3.5",
17-
]
12+
dev = ["black==26.3.1", "flake8==7.1.2", "isort==6.0.1", "pytest==9.0.3"]
1813

1914
[tool.uv]
2015
package = false
2116

2217
[tool.black]
2318
line-length = 120
24-
target-version = ['py38', 'py39']
19+
target-version = ['py314']
2520
include = '\.pyi?$'
2621

2722
[tool.isort]

0 commit comments

Comments
 (0)