Compare commits

...

2 Commits

Author SHA1 Message Date
github-actions[bot] 38fa760429 chore(master): release 1.3.1 (#27)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-21 22:42:45 +02:00
TPTBusiness 0ce6f6ec6d fix(deps): bump python-dotenv to >=1.2.2 (CVE symlink overwrite)
Resolves last open Dependabot alert: python-dotenv symlink following
in set_key allows arbitrary file overwrite via cross-device rename.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 22:41:42 +02:00
3 changed files with 9 additions and 2 deletions
+1 -1
View File
@@ -1,3 +1,3 @@
{
".": "1.3.0"
".": "1.3.1"
}
+7
View File
@@ -1,5 +1,12 @@
# Changelog
## [1.3.1](https://github.com/TPTBusiness/Predix/compare/v1.3.0...v1.3.1) (2026-04-21)
### Bug Fixes
* **deps:** bump python-dotenv to &gt;=1.2.2 (CVE symlink overwrite) ([126ae7d](https://github.com/TPTBusiness/Predix/commit/126ae7d5fb556b677d09d10221862a0d648d697a))
## [1.3.0](https://github.com/TPTBusiness/Predix/compare/v1.2.2...v1.3.0) (2026-04-21)
+1 -1
View File
@@ -37,7 +37,7 @@ tables
tree-sitter-python
tree-sitter
python-dotenv
python-dotenv>=1.2.2 # CVE: symlink following allows arbitrary file overwrite
# infrastructure related.
docker