Skip to content

Bump devpi-web from 5.1.1 to 5.2.0 in /server - #191

Merged
JonasAlfredsson merged 1 commit into
mainfrom
dependabot/pip/server/devpi-web-5.2.0
Nov 3, 2026
Merged

JonasAlfredsson merged 1 commit into
mainfrom
dependabot/pip/server/devpi-web-5.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps devpi-web from 5.1.1 to 5.2.0.

Commits
  • 42d2075 Prepare releases.
  • c9adacd Block potentially out of bounds RelPath.
  • 7635884 Block "." and ".." as user and index names.
  • 680fca1 Fix out of bounds path traversal when serving documentation files.
  • 31e93fa Add ids to fixture parameters for easier identification in test names.
  • 4c333a9 Fix check for relative paths when extracting archives.
  • 20913fc Remove slashes from self-closing br, link and input tags.
  • b4790d6 Add CVE and advisory info in changelog.
  • fe76eb8 Add some type annotation to devpi-debugging.
  • 75957cf Add some basic tests for devpi-debugging.
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 2, 2026
@JonasAlfredsson

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [devpi-web](https://github.com/devpi/devpi) from 5.1.1 to 5.2.0.
- [Changelog](https://github.com/devpi/devpi/blob/main/doc/changelog.rst)
- [Commits](devpi/devpi@web-5.1.1...web-5.2.0)

---
updated-dependencies:
- dependency-name: devpi-web
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/server/devpi-web-5.2.0 branch from 0a6ed34 to a1bc440 Compare November 3, 2026 14:02
@JonasAlfredsson
JonasAlfredsson merged commit 9ae26ec into main Nov 3, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/server/devpi-web-5.2.0 branch November 3, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant