Skip to content
This repository was archived by the owner on Apr 13, 2025. It is now read-only.

Update mkdocs & plugins and add auto-updateing with dependabot #71

Merged
merged 2 commits into from
Oct 16, 2021
Merged

Conversation

J0B10
Copy link
Member

@J0B10 J0B10 commented Oct 16, 2021

I saw that there was a security vulnerability in mkdocs and therefore updated all dependencies.

CVE-2021-40978 doesn't expose a risk to this repo as it only occurs when using mkdocs serve / mike serve, but for users that use it locally for editing & debugging the wiki it could be a huge threat especially if they are in a public network (eg. universitys, scools) as it allows access to their local files.

Therefore it should be fixed ASAP.

To faster resolve such issues in the future I added auto-updates with dependabot.
It will open a Pull-Request if any of the used pip modules has an update available.
This should also help keeping track of new updates as it's easy to forget about them, especially for the documentation.

@J0B10 J0B10 requested a review from hlxid October 16, 2021 10:42
@J0B10 J0B10 merged commit a867b7c into master Oct 16, 2021
@J0B10 J0B10 deleted the update branch October 16, 2021 10:46
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants