This repository was archived by the owner on Apr 13, 2025. It is now read-only.
Update mkdocs & plugins and add auto-updateing with dependabot #71
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I saw that there was a security vulnerability in mkdocs and therefore updated all dependencies.
CVE-2021-40978 doesn't expose a risk to this repo as it only occurs when using
mkdocs serve
/mike serve
, but for users that use it locally for editing & debugging the wiki it could be a huge threat especially if they are in a public network (eg. universitys, scools) as it allows access to their local files.Therefore it should be fixed ASAP.
To faster resolve such issues in the future I added auto-updates with dependabot.
It will open a Pull-Request if any of the used pip modules has an update available.
This should also help keeping track of new updates as it's easy to forget about them, especially for the documentation.