Skip to content

chore(deps): update dependency asteval to v1.0.9#77

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/asteval-1.x
Open

chore(deps): update dependency asteval to v1.0.9#77
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/asteval-1.x

Conversation

@renovate

@renovate renovate Bot commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
asteval patch ==1.0.6==1.0.9 OpenSSF Scorecard

Release Notes

lmfit/asteval (asteval)

v1.0.9

Compare Source

This fixes some usage problem and is also meant to address the securirty advisories GHSA-89v8-rhwq-hf77
and GHSA-9w56-46f6-3qhx

Changes:

  • Fix unpacking of nested tuples in comprehensions (#​149 from yistarostin)

  • Fix error with lambda functions, so that calls from top level should clear previous errors and exceptions should clear the callstack before re-raising (#​150)

  • Add try/except for import of ctypes, so that this module is not required from asteval to run (#​152)

  • Update PyPI stats link in README

  • Remove the "exiting exceptions", 'SystemExit' and 'GeneratorExit' from the symbol table to remove the possibily of such an exception in asteval from exiting the calling application. (#​153)

  • Make exception handling of BaseExceptions that are not also Exceptions (most notably, KeyboardInterrupt, which is not removed from the symbol table) more explicit, converting these to RuntimeError. (#​153)

  • Add 'ctypes', 'dump, and 'tofile' as unsafe attributes of numpyndarrays, so that these cannot be acccessed. (#​153)

v1.0.8

Compare Source

Fixes and improvements:

  • fix bug (#​146) so that return from a Procedure does not interrupt the calling code block
  • remove numpy.memmap from default methods
  • add discussion of numpy functions/objects that can open files
  • add support and tests for lambda expressions
  • add default permissions to github actions
  • update README, doc, remove cruft

v1.0.7

Compare Source

  • return in while, for, and with blocks in functions properly signal an immediate exit of the function. (fixes #​141)
  • fix augassign to retain line numbers for exceptions properly. (#​140)
  • make sure that "unsafe_modules" should not be accessed even if imported and exposed by other modules
  • cleanup unused nodes
  • tweaks and fixes to docs
  • drop testing with Python 3.9
  • add testing for Python 3.14
  • update pyproject.toml from the endless churn from PyPA, to move the location and formatting for the LICENSE, to continue compliance with the endless churn from PyPA.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner April 17, 2026 11:21
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch from 611928f to d7ac602 Compare April 22, 2026 08:16
night-warden
night-warden previously approved these changes Jun 4, 2026
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch 9 times, most recently from 027fd56 to c135fa5 Compare June 5, 2026 09:41
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch from c135fa5 to dd4ccba Compare June 12, 2026 01:52
@renovate renovate Bot changed the title chore(deps): update dependency asteval to v1.0.8 chore(deps): update dependency asteval to v1.0.9 Jun 12, 2026
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch 2 times, most recently from c67f572 to dcfbbf2 Compare June 19, 2026 16:22
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch 3 times, most recently from 2aae6df to d707ad6 Compare July 9, 2026 23:03
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch from d707ad6 to c11bd4a Compare July 10, 2026 17:20
@renovate
renovate Bot force-pushed the renovate/asteval-1.x branch from c11bd4a to f531802 Compare July 11, 2026 05:31

@jina-simulation jina-simulation Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Content removed.

@midnightntwrk midnightntwrk deleted a comment from jina-simulation Bot Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant