Application to organize conferences
PonyConf, updated
🕥
2022-01-21 19:33:26
PonyConf
Organise your conferences
- Jabber : [email protected]
- IRC: #ponyconf on freenode
HowTo Test
(you should work on a virtualenv)
bash
git clone --recursive [email protected]:toulibre/PonyConf.git
cd PonyConf
pip install -U -r requirements.txt
./manage.py migrate
./manage.py runserver
./manage.py createsuperuser
HowTo update translations
bash
./manage.py makemessages
poedit locale/fr/LC_MESSAGES/django.po
./manage.py compilemessages
Issues
Bump ipython from 7.16.1 to 7.16.3
opened on 2022-01-21 19:33:25 by dependabot[bot]Bumps ipython from 7.16.1 to 7.16.3.
Commits
d43c7c7release 7.16.35fa1e40Merge pull request from GHSA-pq7m-3gw7-gq5x8df8971back to dev9f477b7release 7.16.2138f266bring back release helper from master branch5aa3634Merge pull request #13341 from meeseeksmachine/auto-backport-of-pr-13335-on-7...bcae8e0Backport PR #13335: What's new 7.16.28fcdcd3Pin Jedi to <0.17.2.- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
Bump django from 3.1 to 3.1.13
opened on 2021-09-22 17:46:16 by dependabot[bot]Bumps django from 3.1 to 3.1.13.
Commits
43873b9[3.1.x] Bumped version for 3.1.13 release.0bd57a8[3.1.x] Fixed CVE-2021-35042 -- Prevented SQL injection in QuerySet.order_by().8dc1cc0[3.1.x] Added stub release notes for 3.1.13.1471ec4[3.1.x] Fixed docs header underlines in security archive.6022181[3.1.x] Added CVE-2021-33203 and CVE-2021-33571 to security archive.064c0c5[3.1.x] Post-release version bump.625d3c1[3.1.x] Bumped version for 3.1.12 release.203d4ab[3.1.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.20c67a0[3.1.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs'...aa8781c[3.1.x] Confirmed release date for Django 3.1.12, and 2.2.24.- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
Bump django-debug-toolbar from 2.2 to 2.2.1
opened on 2021-04-16 20:09:43 by dependabot[bot]Bumps django-debug-toolbar from 2.2 to 2.2.1.
Changelog
Sourced from django-debug-toolbar's changelog.
2.2.1 (2021-04-14)
- Fixed SQL Injection vulnerability, CVE-2021-30459. The toolbar now calculates a signature on all fields for the SQL select, explain, and analyze forms.
Commits
5e6750bMerge pull request from GHSA-pghf-347x-c2gj- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
Bump pygments from 2.6.1 to 2.7.4
opened on 2021-03-29 18:08:57 by dependabot[bot]Bumps pygments from 2.6.1 to 2.7.4.
Release notes
Sourced from pygments's releases.
2.7.4
Updated lexers:
Fix infinite loop in SML lexer (#1625)
Fix backtracking string regexes in JavaScript/TypeScript, Modula2 and many other lexers (#1637)
Limit recursion with nesting Ruby heredocs (#1638)
Fix a few inefficient regexes for guessing lexers
Fix the raw token lexer handling of Unicode (#1616)
Revert a private API change in the HTML formatter (#1655) -- please note that private APIs remain subject to change!
Fix several exponential/cubic-complexity regexes found by Ben Caller/Doyensec (#1675)
Fix incorrect MATLAB example (#1582)
Thanks to Google's OSS-Fuzz project for finding many of these bugs.
2.7.3
... (truncated)
Changelog
Sourced from pygments's changelog.
Version 2.7.4
(released January 12, 2021)
Updated lexers:
Fix infinite loop in SML lexer (#1625)
Fix backtracking string regexes in JavaScript/TypeScript, Modula2 and many other lexers (#1637)
Limit recursion with nesting Ruby heredocs (#1638)
Fix a few inefficient regexes for guessing lexers
Fix the raw token lexer handling of Unicode (#1616)
Revert a private API change in the HTML formatter (#1655) -- please note that private APIs remain subject to change!
Fix several exponential/cubic-complexity regexes found by Ben Caller/Doyensec (#1675)
Fix incorrect MATLAB example (#1582)
Thanks to Google's OSS-Fuzz project for finding many of these bugs.
Version 2.7.3
(released December 6, 2020)
... (truncated)
Commits
4d555d0Bump version to 2.7.4.fc3b05dUpdate CHANGES.ad21935Revert "Added dracula theme style (#1636)"e411506Prepare for 2.7.4 release.275e34ddoc: remove Perl 6 ref2e7e8c4Fix several exponential/cubic complexity regexes found by Ben Caller/Doyenseceb39c43xquery: fix pop from empty stack2738778fix coding style in test_analyzer_lexer02e0f09Added 'ERROR STOP' to fortran.py keywords. (#1665)c83fe48support added for css variables (#1633)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
Bump jinja2 from 2.11.2 to 2.11.3
opened on 2021-03-20 00:08:34 by dependabot[bot]Bumps jinja2 from 2.11.2 to 2.11.3.
Release notes
Sourced from jinja2's releases.
2.11.3
This contains a fix for a speed issue with the
urlizefilter.urlizeis likely to be called on untrusted user input. For certain inputs some of the regular expressions used to parse the text could take a very long time due to backtracking. As part of the fix, the email matching became slightly stricter. The various speedups apply tourlizein general, not just the specific input cases.
Changelog
Sourced from jinja2's changelog.
Version 2.11.3
Released 2021-01-31
- Improve the speed of the
urlizefilter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. :pr:1343
Commits
cf21539release version 2.11.315ef8f0Merge pull request #1343 from pallets/urlize-speedupef658dcspeed up urlize matchingeeca0feMerge pull request #1207 from mhansen/patch-12dd7691Merge pull request #1209 from mhansen/patch-34892940do_dictsort: update example ready to copy/paste7db7d33api.rst: bugfix in docs, import PackageLoader9ec465bfix changelog header- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
Bump bleach from 3.1.5 to 3.3.0
opened on 2021-02-02 21:50:07 by dependabot[bot]Bumps bleach from 3.1.5 to 3.3.0.
Changelog
Sourced from bleach's changelog.
Version 3.3.0 (February 1st, 2021)
Backwards incompatible changes
- clean escapes HTML comments even when strip_comments=False
Security fixes
- Fix bug 1621692 / GHSA-m6xf-fq7q-8743. See the advisory for details.
Features
None
Bug fixes
None
Version 3.2.3 (January 26th, 2021)
Security fixes
None
Features
None
Bug fixes
- fix clean and linkify raising ValueErrors for certain inputs. Thank you
@Google-Autofuzz.Version 3.2.2 (January 20th, 2021)
Security fixes
None
Features
- Migrate CI to Github Actions. Thank you
@hugovk.Bug fixes
- fix linkify raising an IndexError on certain inputs. Thank you
@Google-Autofuzz.Version 3.2.1 (September 18th, 2020)
... (truncated)
Commits
79b7a3cMerge pull request from GHSA-vv2x-vrpj-qqpq842fcb4Update for v3.3.0 release1334134sanitizer: escape HTML commentsc045a8bMerge pull request #581 from mozilla/nit-fixes491abb0fix typo s/vnedoring/vendoring/10b1c5dvendor: add html5lib-1.1.dist-info/REQUESTEDcd838c3Merge pull request #579 from mozilla/validate-convert-entity-code-points612b808Update for v3.2.3 release6879f6ahtml5lib_shim: validate unicode points for convert_entity90cb80bUpdate for v3.2.2 release- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/PonyConf/PonyConf/network/alerts).
PonyConf
GitHub Repository
conferences cfp web open-source