json/tools/generate_natvis/requirements.in at d1235cecc9f7d2f2a33228362ce096ac7e990130 - json - Gitea: Git with a cup of tea

amorfo77/json

0 Fork 0

mirror of https://github.com/nlohmann/json.git synced 2026-10-23 06:18:56 +00:00

Files

T

Niels Lohmann d1235cecc9 Pin CI pip installs by hash and update KaTeX/DOMPurify

The pip installs in check_amalgamation.yml, ubuntu.yml (Meson) and
semgrep.yml now use --require-hashes with requirements files compiled by
pip-compile --generate-hashes (Python 3.14, as on ubuntu-26.04). The
astyle and generate_natvis requirements move to requirements.in, and
Meson and Semgrep get theirs in .github/requirements, which Dependabot
now watches. check_amalgamation.yml installs the natvis requirements
from the PR tree, as it already does for astyle.

The Mermaid checker overrides KaTeX to 0.18.11 (GHSA-238p-pmpm-9mq7;
Mermaid 11 still requires ^0.16.47) and updates DOMPurify to 3.4.17
(GHSA-cg2g-xh64-v4q7, GHSA-mrv2-3pqr-j5jr, GHSA-c6gr-qvv4-5v3f).

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-10-23 07:20:44 +02:00

2 lines

14 B

Plaintext

Raw Blame History

jinja2==3.1.6