Skip to content

fix: commonmark no longer a dependency #2574

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 24, 2023

Conversation

terriko
Copy link
Contributor

@terriko terriko commented Jan 23, 2023

Commonmark was removed as a dependency (in favour of markdown-it) by one of the packages cve-bin-tool uses. The SBOMs all updated correctly and have been merged, but our python language scanner test used our own requirements.txt and was expecting it. This removes it from the test, although it doesn't add the new dependency.

@terriko
Copy link
Contributor Author

terriko commented Jan 23, 2023

Just in case anyone's wondering, it's rich that changed dependencies:

- Relationship: SPDXRef-Package-57-rich DEPENDS_ON SPDXRef-Package-58-commonmark
+ Relationship: SPDXRef-Package-57-rich DEPENDS_ON SPDXRef-Package-58-markdown-it-py

@terriko
Copy link
Contributor Author

terriko commented Jan 24, 2023

Merging now so I can start re-running broken tests.

@terriko terriko merged commit 2263e4c into intel:main Jan 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant