chore(deps): update dependency pygments to v2.15.0 [security]#215
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): update dependency pygments to v2.15.0 [security]#215renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==2.9.0→==2.15.0GitHub Vulnerability Alerts
CVE-2022-40896
A ReDoS issue was discovered in
pygments/lexers/smithy.pyin Pygments until 2.15.0 via SmithyLexer.Release Notes
pygments/pygments (Pygments)
v2.15.0Compare Source
(released April 10th, 2023)
Added lexers:
Updated lexers:
AMDGPU: Add support for
scratch_instructions, theattr*.*argument,as well as the
offmodifier (#2327).APDL: Miscellaneous improvements (#2314)
bash/tcsh:
breakto keywords (#2377)Chapel: Support attributes (#2376)
CMake: Implement bracket style comments (#2338, #2354)
CSS: Improve lexing of numbers inside function calls (#2382, #2383)
diff: Support normal diff syntax, as opposed to unified diff syntax (#2321)
GLSL, HLSL:
LilyPond: minor update of builtins
PHP: support attributes (#2055, #2347, #2360), fix anonymous classes without
parameters (#2359), improve lexing of variable variable syntax (#2358)
Python:
None(#2406)Rebol/Red: Don't require script headers (#2348, #2349)
Spice: Update keywords (#2336)
SQL+Jinja (
analyse_textmethod): Fix catastrophic backtracking (#2355)Terraform: Add
hclalias (#2375)Declare support for Python 3.11 and drop support for Python 3.6 (#2324).
Update
nativestyle to improve contrast (#2325).Update `github-dark`` style to match latest Primer style (#2401)
Revert a change that made guessing lexers based on file names slower
on Python 3.10 and older (#2328).
Fix some places where a locale-dependent encoding could unintentionally
be used instead of UTF-8 (#2326).
Fix Python traceback handling (#2226, #2329).
Groff formatter: sort color definitions for reproducibility (#2343)
Move project metadata to
pyproject.toml, removesetup.pyand
setup.cfg(#2342)The top-level
Makefilehas been removed. Instead, all shortcutsfor developing are now defined and run through tox. The
docfolderstill contains a
Makefileas an alternative totox -e doc.v2.14.0Compare Source
(released January 1st, 2023)
Added lexers:
Updated lexers:
Abap: Update keywords (#2281)
Alloy: Update for Alloy 6 (#1963)
C family (C, C++ and many others):
definition due to braces in comments (#2210)
C#: Fix number and operator recognition (#2256, #2257)
CSound: Updated builtins (#2268)
F#: Add
.fsxfile extension (#2282)gas (GNU assembler): recognize braces as punctuation (#2230)
HTTP: Add
CONNECTkeyword (#2242)Inform 6: Fix lexing of properties and doubles (#2214)
INI: Allow comments that are not their own line (#2217, #2161)
Java properties: Fix issue with whitespace-delimited keys, support
comments starting with
!and escapes, no longer support undocumented;and//comments (#2241)LilyPond: Improve heuristics, add
\maximaduration (#2283)LLVM: Add opaque pointer type (#2269)
Macaulay2: Update keywords (#2305)
Minecraft-related lexers (SNB and Minecraft function) moved to
pygments.lexers.minecraft(#2276)Nim: General improvements (#1970)
Nix: Fix single quotes inside indented strings (#2289)
Objective J: Fix catastrophic backtracking (#2225)
NASM: Add support for SSE/AVX/AVX-512 registers as well as 'rel'
and 'abs' address operators (#2212)
Powershell:
local:keyword (#2254)Solidity: Add boolean operators (#2292)
Spice: Add
enumkeyword and fix a bug regarding binary,hexadecimal and octal number tokens (#2227)
YAML: Accept colons in key names (#2277)
Fix
make mapfileswhen Pygments is not installed in editable mode(#2223)
Support more filetypes and compression types in
autopygmentize(#2219)Merge consecutive tokens in Autohotkey, Clay (#2248)
Add
.nasmas a recognized file type for NASM (#2280)Add
*Spec.hsas a recognized file type forHSpec(#2308)Add
*.pyi(for typing stub files) as a recognized file type forPython (#2231)
The HTML lexer no longer emits empty spans for whitespace (#2304)
Fix
IRCFormatterinserting linenumbers incorrectly (#2270)v2.13.0Compare Source
(released August 15th, 2022)
Added lexers:
Updated lexers:
because it disturbs lexing of aspects (#2125)
elements of function headers, e.g. between the arguments and
the opening brace for the body (#1891)
Errortokens (#2207, #2208)Setand qualified identifiers (#2158)
(#2194)
valuemodifier (#2142)appears in the output (#2166)
StarOffice Basic (#2170)
Name.Builtininstead ofKeyword.Type(#2136)\"$var\"inside strings (#2105)\N,\uand\Uescape sequencesin string literals, but not in bytes literals where they are
not supported (#2204)
${name}variables (#2145)<<heredocdelimiters (#2162)
builtin functions and bin, oct, hex number formats (#2206)
Added styles:
nordandnord-darker; #2189, #1799, #1678)Pygments now tries to use the
importlib.metadatamodule todiscover plugins instead of the slower
pkg_resources(#2155). Inparticular, this largely speeds up the
pygmentizescript whenthe lexer is not specified.
importlib.metadatais only available in the Python standardlibrary since Python 3.8. For older versions, there exists an
importlib_metadatabackport on PyPI. For this reason, Pygmentsnow defines a packaging extra
plugins, which adds a requirementon
importlib_metadataif the Python version is older than3.8. Thus, in order to install Pygments with optimal plugin
support even for old Python versions, you should do::
pip install pygments[plugins]
Pygments still falls back on
pkg_resourcesif neitherimportlib.metadatanorimportlib_metadatais found, but itwill be slower.
Silently ignore
BrokenPipeErrorin the command-line interface(#2193).
The
HtmlFormatternow uses thelinespansattribute foranchorlinenosif thelineanchorsattribute is unset (#2026).The
highlight,lexandformatfunctions no longerwrongly report "argument must be a lexer/formatter instance, not a
class" in some cases where this is not the actual problem (#2123).
Fix warnings in doc build (#2124).
The
codetagifyfilter now recognizesFIXMEtags by default (#2150).The
pygmentizecommand now recognizes if theCOLORTERMenvironment variable is set to a value indicating that true-color
support is available. In that case, it uses the
TerminalTrueColorFormatterby default (#2160)
Remove redundant caches for filename patterns (#2153)
Use new non-deprecated Pillow API for text bounding box in
ImageFormatter(#2198)
Remove
default_style(#930, #2183)Stop treating
DeprecationWarningsas errors in the unit tests (#2196)v2.12.0Compare Source
(released April 24th, 2022)
Added lexers:
UnixConfigLexerfor "colon-separated" config files, like/etc/passwd(#2112)Updated lexers:
Agda: Update keyword list (#2017)
C family: Fix identifiers after
casestatements (#2084)Clojure: Highlight ratios (#2042)
Csound: Update to 6.17 (#2064)
CSS: Update the list of properties (#2113)
Elpi:
->(#2028)Futhark: Add missing tokens (#2118)
Gherkin: Add
But(#2046)Inform6: Update to 6.36 (#2050)
Jinja2: add
.xxx.j2and.xxx.jinja2to relevant lexers(for
xxx=html,xml, etc.) (#2103)JSON: Support C comments in JSON (#2049). Note: This doesn't mean the JSON parser now supports JSONC or JSON5 proper, just that it doesn't error out when seeing a
/* */or//style comment. If you need proper comment handling, consider using theJavaScriptlexer.LilyPond:
PHP: Update builtin function and keyword list (#2054, #2056)
Python: highlight
EncodingWarning(#2106)Savi: fix highlighting for underscore/private identifiers,
add string interpolation (#2102); fix nested type name highlighting
(#2110)
Scheme: Various improvements (#2060)
Spice: Update the keyword list, add new types (#2063, #2067)
Terraform:
Add
pluginsargument toget_all_lexers().Bump minimal Python version to 3.6 (#2059)
Fix multiple lexers marking whitespace as
Text(#2025)Remove various redundant uses of
re.UNICODE(#2058)Associate
.resourcewith the Robot framework (#2047)Associate
.cljcwith Clojure (#2043)Associate
.tppwith C++ (#2031)Remove traces of Python 2 from the documentation (#2039)
The
nativestyle was updated to meet the WCAG AAA contrast guidelines (#2038)Fix various typos (#2030)
Fix
Groffformatter not inheriting token styles correctly (#2024)Various improvements to the CI (#2036)
The Ada lexer has been moved to a separate file (#2117)
When
linenos=tableis used, the<table>itself is now wrapped with a<div class="highlight">tag instead of placing it inside the<td class="code">cell (#632.) With this change, the output matches the documented behavior... note::
If you have subclassed
HtmlFormatter.wrap, you may have to adjust the logic.v2.11.2Compare Source
(released January 6th, 2022)
Updated lexers:
recordkeywords result inErrortokens in some cases (#2016, #2018)Fix links to line numbers not working correctly (#2014)
Remove
underlinefromWhitespacestyle in theTangotheme (#2020)Fix
IRCandTerminal256formatters not backtracking correctly for custom token types, resulting in some unstyled tokens (#1986)v2.11.1Compare Source
(released December 31st, 2021)
Updated lexers:
unsigned int) (#2008):to result inErrortokens (#2010)v2.11.0Compare Source
(released December 30th, 2021)
Added lexers:
.SRCINFO(#1951)Updated lexers:
ABNF: Allow one-character rules (#1804)
Assembly: Fix incorrect token endings (#1895, #1961)
Bibtex: Distinguish between
commentandcommentary(#1899, #1806)C family: Support unicode identifiers (#1848)
CDDL: Fix slow lexing speed (#1959)
Debian control: Add missing fields (#1946)
Devicetree: Recognize hexadecimal addresses for nodes (#1949)
GDScript: Add
voiddata type (#1948)GSQL
HTML, XML: Improve comment handling (#1896)
Java: Add
yield(#1941) and sealed classes/record (#1902)Makefiles (#1860, #1898)
objdump-nasm: Improve handling of
--no-show-raw-insndumps (#1981)Prolog: Support escaped
\inside quoted strings (#1479)Python:
~in tracebacks (#2004)RobotFramework: Improve empty brace handling (#1921, #1922)
Terraform
Added styles:
LilyPondlanguage... note::
All of the new styles unfortunately do not conform to WCAG recommendations.
Text(#1237, #1905, #1908, #1914, #1911, #1923, #1939, #1957, #1978)pygmentizesupports JSON output for the various list functions now, making it easier to consume them from scripts. (#1437, #1890)shelllexer forkshrcfiles (#1947)rubylexer forVagrantfilefiles (#1936).xbmand.xpmfiles (#1802)groffformatter (#1873)manpagesHtmlFormattercan now emit tooltips for each token to ease debugging of lexers (#1822)f90as an alias forfortran(#2000)v2.10.0Compare Source
(released August 15th, 2021)
Added lexers:
Updated lexers:
C-family: Fix preprocessor token issues (#1830)
C# (#1573, #1869)
CSound (#1837)
Fennel (#1862)
JavaScript (#1741, #1814)
LLVM (#1824)
Python (#1852)
Rust
Scala: Add support for the
\operator (#1857)Swift (#1767, #1842)
Tcl: Allow
,and@in strings (#1834, #1742)TOML (#1870, #1872)
Fix assert statements in TNT lexer.
Token types across all lexers have been unified (using the most common token
type name) (#1816, #1819)
Improve Jasmin min score analysis (#1619)
Add new alias for Go files (#1827)
Fix multi-line console highlighting (#1833)
Add a new trivial lexer which outputs everything as
Text.Generic.Output(#1835, #1836)Use the
.inilexer forsystemdfiles (#1849)Fix a
FutureWarningrelated towords()(#1854)pwshis now recognized as an alias for PowerShell (#1876)Configuration
📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.