Skip to content

Commit a130ef3

Browse files
author
ECG Bot
committed
build(deps): update dbrgn/tealdeer to v1.7.2
This MR contains the following updates: | Package | Update | Change | |---|---|---| | [dbrgn/tealdeer](https://github.com/dbrgn/tealdeer) | patch | `v1.7.1` -> `v1.7.2` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>dbrgn/tealdeer (dbrgn/tealdeer)</summary> ### [`v1.7.2`](https://github.com/dbrgn/tealdeer/blob/HEAD/CHANGELOG.md#v172-v172-2025-03-18) [Compare Source](tealdeer-rs/tealdeer@v1.7.1...v1.7.2) This patch release updates the `zip` dependency to mitigate a potential security vulnerability. A successful attack against tealdeer users would require manipulation of the tldr pages archive downloaded during an update. As the archive is downloaded from a trusted source (the tldr-pages organization), it seems very unlikely that running a version of tealdeer prior to 1.7.2 poses a security risk. Nevertheless, it cannot hurt to rule out any chance of an attack by updating tealdeer to version 1.7.2. For more details, please see GHSA-94vh-gphv-8pm8. - \[security] Require `zip >= 2.3.0` - \[chore] Run CI on backport branches and on dispatch </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIxMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
1 parent 98418d7 commit a130ef3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

chezmoi/dot_config/aquaproj-aqua/aqua.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,7 @@ packages:
157157
- name: aandrew-me/tgpt@v2.9.2
158158
description: AI Chatbots in terminal without needing API keys
159159
link: https://github.com/aandrew-me/tgpt
160-
- name: dbrgn/tealdeer@v1.7.1
160+
- name: dbrgn/tealdeer@v1.7.2
161161
description: A very fast implementation of tldr in Rust
162162
link: https://github.com/dbrgn/tealdeer
163163
- name: danielgtaylor/restish@v0.20.0

0 commit comments

Comments
 (0)