Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump pytest from 6.2.2 to 6.2.3 (#576)
Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.2.2 to 6.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/releases">pytest's releases</a>.</em></p> <blockquote> <h2>6.2.3</h2> <h1>pytest 6.2.3 (2021-04-03)</h1> <h2>Bug Fixes</h2> <ul> <li> <p><a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8414">#8414</a>: pytest used to create directories under <code>/tmp</code> with world-readable permissions. This means that any user in the system was able to read information written by tests in temporary directories (such as those created by the <code>tmp_path</code>/<code>tmpdir</code> fixture). Now the directories are created with private permissions.</p> <p>pytest used silenty use a pre-existing <code>/tmp/pytest-of-<username></code> directory, even if owned by another user. This means another user could pre-create such a directory and gain control of another user's temporary directory. Now such a condition results in an error.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pytest-dev/pytest/commit/3a2fd9630547e224bea6e024a4f6852761235c61"><code>3a2fd96</code></a> Prepare release version 6.2.3</li> <li><a href="https://github.com/pytest-dev/pytest/commit/138b19a9300f49bd7d2041d24a3f805787a0b2e1"><code>138b19a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8517">#8517</a> from bluetech/backport-mktmp</li> <li><a href="https://github.com/pytest-dev/pytest/commit/822686e880b3757977e9d56470e00dcd391371f2"><code>822686e</code></a> tmpdir: prevent using a non-private root temp directory</li> <li><a href="https://github.com/pytest-dev/pytest/commit/9dc54f79b0026da98ee06f6d72be6fece571151a"><code>9dc54f7</code></a> tmpdir: fix temporary directories created with world-readable permissions</li> <li><a href="https://github.com/pytest-dev/pytest/commit/93dbae24e1b975c365c892eb8939284ead020c9d"><code>93dbae2</code></a> pathlib: inline ensure_reset_dir()</li> <li><a href="https://github.com/pytest-dev/pytest/commit/02fdbe2e765ccb9c8c0c933944e05ea31425895e"><code>02fdbe2</code></a> pathlib: remove useless temporary variable</li> <li><a href="https://github.com/pytest-dev/pytest/commit/12e7db85af88058afebd80f4b41cec89bea5a343"><code>12e7db8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8285">#8285</a> from nicoddemus/backport-8280</li> <li><a href="https://github.com/pytest-dev/pytest/commit/56e43924447dae9b9793b62093981dfa36993dda"><code>56e4392</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8280">#8280</a> from xuhdev/module</li> <li><a href="https://github.com/pytest-dev/pytest/commit/8220eca963472e7918ef7e108bdc1cd8ed155a4a"><code>8220eca</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8275">#8275</a> from pytest-dev/release-6.2.2</li> <li>See full diff in <a href="https://github.com/pytest-dev/pytest/compare/6.2.2...6.2.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end)
- Loading branch information