Updates doc build dependencies to avoid vulnerabilities#429
Conversation
|
An automated preview of the documentation is available at https://429.redis.prtest3.cppalliance.org/libs/redis/doc/html/index.html If more commits are pushed to the pull request, the docs will rebuild at the same URL. 2026-06-18 09:17:02 UTC |
|
Since I saw you post about this on the ML, have you considered enabling Dependabot on the repo? Then these dependencies and vulnerabilities are automatically taken care of. It's worked pretty well for me on Decimal. You enable it in the settings and then you can put together a trivial yaml file like this: https://github.com/boostorg/decimal/blob/develop/.github/dependabot.yml. Grouped updates really reduces noise. |
|
I see. Thanks for sharing @mborland. The neat thing is that I've been receiving emails from dependabot since forever, and I've always thought they related to the benchmark programs and ignoring them. Re-reading them again, it looks like the tokio version used in the Rust benchmarks is also flagged. I suspect if I enable dependabot now, it will try to fix it, too. @mzimbres I recall that your intention was to completely extract the benchmarks out of this repo, which would solve the problem. How is it going? Can I help anyhow? |
Updates antora to 3.1.15
Upgrades Axios from 1.13, which had a critical security vulnerability, to 1.16