From 4e726919f08e39e74dd70a592b5258dfc7b25953 Mon Sep 17 00:00:00 2001 From: Grzegorz Skorupa Date: Mon, 15 Apr 2019 09:09:32 +0200 Subject: [PATCH] 1.0.7 release Upgrating depenencies due to Jinja2 vulnerability found: In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. --- requirements_stable.txt | 53 ++++++++++++++++++++++------------------- setup.py | 2 +- 2 files changed, 29 insertions(+), 26 deletions(-) diff --git a/requirements_stable.txt b/requirements_stable.txt index 8df6d27..22dc955 100644 --- a/requirements_stable.txt +++ b/requirements_stable.txt @@ -1,38 +1,41 @@ -atomicwrites==1.2.1 -attrs==18.2.0 -bleach==3.0.2 -certifi==2018.11.29 +atomicwrites==1.3.0 +attrs==19.1.0 +bleach==3.1.0 +certifi==2019.3.9 +cffi==1.12.2 chardet==3.0.4 Click==7.0 -Cython==0.29.2 +Cython==0.29.7 docutils==0.14 idna==2.8 -Jinja2==2.10 -MarkupSafe==1.1.0 -more-itertools==4.3.0 -numpy==1.15.4 -pandas==0.23.4 +Jinja2==2.10.1 +MarkupSafe==1.1.1 +more-itertools==7.0.0 +numpy==1.16.2 +pandas==0.24.2 patsy==0.5.1 -pip-tools==3.2.0 -pkginfo==1.4.2 -pluggy==0.8.0 -pmdarima==1.0.0 -py==1.7.0 +pip-tools==3.6.0 +pkginfo==1.5.0.1 +pluggy==0.9.0 +pmdarima==1.1.1 +py==1.8.0 +pycparser==2.19 Pygments==2.3.1 -pytest==4.0.2 -python-dateutil==2.7.5 -pytz==2018.7 +pytest==4.4.0 +python-dateutil==2.8.0 +pytz==2019.1 readme-renderer==24.0 requests==2.21.0 -requests-toolbelt==0.8.0 -rpy2==2.9.5 -scikit-learn==0.20.2 -scipy==1.2.0 +requests-toolbelt==0.9.1 +rpy2==3.0.1 +scikit-learn==0.20.3 +scipy==1.2.1 +simplegeneric==0.8.1 six==1.12.0 sklearn==0.0 statsmodels==0.9.0 --e git+git@github.com:intive-DataScience/tbats.git@0474739ff3e6f57601d5b544f6efeb86a2c5d023#egg=tbats -tqdm==4.28.1 -twine==1.12.1 +-e git+git@github.com:intive-DataScience/tbats.git@34725f87625127bac1a9f5cf66389a4650c608c0#egg=tbats +tqdm==4.31.1 +twine==1.13.0 urllib3==1.24.1 webencodings==0.5.1 diff --git a/setup.py b/setup.py index 58ada80..a4436ff 100644 --- a/setup.py +++ b/setup.py @@ -43,7 +43,7 @@ def run_tests(self): setuptools.setup( name='tbats', - version='1.0.6', + version='1.0.7', packages=setuptools.find_packages(exclude=('test', 'test_R')), url='https://github.com/intive-DataScience/tbats', license='MIT License',