Skip to content

deps: bump pymdown-extensions to 11.0.1 in doc group - #997

Closed
katsugtgz wants to merge 1 commit into
python-pendulum:masterfrom
katsugtgz:deps/pymdown-extensions-11.0.1
Closed

deps: bump pymdown-extensions to 11.0.1 in doc group#997
katsugtgz wants to merge 1 commit into
python-pendulum:masterfrom
katsugtgz:deps/pymdown-extensions-11.0.1

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates pymdown-extensions to address GHSA-62q4-447f-wv8h, GHSA-9xwg-3r6f-jcx2, GHSA-gm37-52c6-37mw, GHSA-r6h4-mm7h-8pmq (same records as PYSEC-2026-1825, PYSEC-2026-2999, PYSEC-2026-3609, PYSEC-2026-3654).

Evidence:

  • pyproject.toml pinned pymdown-extensions = ">=6,<11" and poetry.lock resolved 10.12
  • osv-scanner reported the IDs above for pymdown-extensions 10.12 before the update
  • updated version: 11.0.1 (constraint widened to >=6,<12)

Validation:

  • osv-scanner no longer reports any advisory for pymdown-extensions after the update
  • PENDULUM_EXTENSIONS=0 poetry run pytest -q tests passes: 1841 passed, 3 skipped
  • poetry run pytest -q tests passes: 1841 passed, 3 skipped
  • poetry check --lock passes
  • docs build with mkdocs succeeds, same warning count as on master (17)

Scope: dependency/lockfile update only.

@katsugtgz

Copy link
Copy Markdown
Author

Closing: duplicate of #991, which already bumps pymdown-extensions to 11.0.1. Apologies for the noise.

@katsugtgz katsugtgz closed this Aug 21, 2026
@katsugtgz
katsugtgz deleted the deps/pymdown-extensions-11.0.1 branch August 21, 2026 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant