Skip to content

Conversation

@kaapstorm
Copy link
Contributor

Addresses security vulnerabilities and bug fixes in openpyxl: Changelog

@kaapstorm kaapstorm requested review from ajeety4 and mkangia June 6, 2025 11:57
@kaapstorm kaapstorm added the dependencies Pull requests that update a dependency file label Jun 6, 2025
Copy link
Contributor

@mkangia mkangia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I assume the tests are good enough to validate the change.

@kaapstorm kaapstorm merged commit 5adc47c into master Jun 6, 2025
5 checks passed
@kaapstorm kaapstorm deleted the nh/openpyxl branch June 6, 2025 14:46
Copy link

@ajeety4 ajeety4 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice 👍
Just curious, how the need to upgrade was identified ? Also wondering if this repo is a good candidate for adding the Dependabot ?

@kaapstorm
Copy link
Contributor Author

Just curious, how the need to upgrade was identified ?

Using the Claude CLI, I asked what changes it recommended, and to prioritize those changes. It gave this change the highest priority because of the age of the version (more than 6 years) and the bugs that have been fixed since then.

Also wondering if this repo is a good candidate for adding the Dependabot ?

Yeah, I think so.

@kaapstorm
Copy link
Contributor Author

🤔 looks like we were using Dependabot #244

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants