You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by ak...@apache.org on 2026/02/03 00:09:34 UTC
(tooling-trusted-releases) branch main updated: Temporarily ignore CVE-2026-1703 in pip-audit until pip 26.0 available
This is an automated email from the ASF dual-hosted git repository.
akm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
The following commit(s) were added to refs/heads/main by this push:
new bc36ba0 Temporarily ignore CVE-2026-1703 in pip-audit until pip 26.0 available
bc36ba0 is described below
commit bc36ba08b193564dbb608b854355afc7a14f8ce2
Author: Andrew K. Musselman <ak...@apache.org>
AuthorDate: Mon Feb 2 15:50:15 2026 -0800
Temporarily ignore CVE-2026-1703 in pip-audit until pip 26.0 available
---
.pre-commit-config.yaml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6a9eb44..f247f81 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -100,6 +100,8 @@ repos:
rev: v2.10.0
hooks:
- id: pip-audit
+ # TODO: remove when GitHub Actions has pip 26.0+
+ args: ["--ignore-vuln", "CVE-2026-1703"]
- repo: https://github.com/oxc-project/mirrors-oxlint
rev: v1.42.0
hooks:
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org