#523 Bump pyyaml from 5.3.1 to 5.4 in /backend
Bumps <https://github.com/yaml/pyyaml|pyyaml> from 5.3.1 to 5.4.
Changelog
_Sourced from <https://github.com/yaml/pyyaml/blob/master/CHANGES|pyyaml's changelog>._
> 5.4 (2021-01-19)
>
> • <https://github-redirect.dependabot.com/yaml/pyyaml/pull/407|yaml/pyyaml#407> -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
> • <https://github-redirect.dependabot.com/yaml/pyyaml/pull/472|yaml/pyyaml#472> -- Fix for <https://github.com/advisories/GHSA-8q59-q68h-6hv4|CVE-2020-14343>, moves arbitrary python tags to UnsafeLoader
> • <https://github-redirect.dependabot.com/yaml/pyyaml/pull/441|yaml/pyyaml#441> -- Fix memory leak in implicit resolver setup
> • <https://github-redirect.dependabot.com/yaml/pyyaml/pull/392|yaml/pyyaml#392> -- Fix py2 copy support for timezone objects
> • <https://github-redirect.dependabot.com/yaml/pyyaml/pull/378|yaml/pyyaml#378> -- Fix compatibility with Jython
Commits
• <https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1|`58d0cb7`> 5.4 release
• <https://github.com/yaml/pyyaml/commit/a60f7a19c0b418fe95fcf2ec0957005ae39e1090|`a60f7a1`> Fix compatibility with Jython
• <https://github.com/yaml/pyyaml/commit/ee98abd7d7bd2ca9c7b98aa19164fd0306a3f3d2|`ee98abd`> Run CI on PR base branch changes
• <https://github.com/yaml/pyyaml/commit/ddf20330be1fae8813b8ce1789c48f244746d252|`ddf2033`> constructor.timezone: __copy_ & *deepcopy*
• <https://github.com/yaml/pyyaml/commit/fc914d52c43f499224f7fb4c2d4c47623adc5b33|`fc914d5`> Avoid repeatedly appending to yaml_implicit_resolvers
• <https://github.com/yaml/pyyaml/commit/a001f2782501ad2d24986959f0239a354675f9dc|`a001f27`> Fix for <https://github.com/advisories/GHSA-8q59-q68h-6hv4|CVE-2020-14343>
• <https://github.com/yaml/pyyaml/commit/fe150624146ee631bb0f95e45731e8b01281fed6|`fe15062`> Add 3.9 to appveyor file for completeness sake
• <https://github.com/yaml/pyyaml/commit/1e1c7fb7c09e9149967c208a6fd07276a6140d57|`1e1c7fb`> Add a newline character to end of pyproject.toml
• <https://github.com/yaml/pyyaml/commit/0b6b7d61719fbe0a11f0980489f1bf8ce746c164|`0b6b7d6`> Start sentences and phrases for capital letters
• <https://github.com/yaml/pyyaml/commit/c97691596eec279ef9191a9b3bba583a17139d5a|`c976915`> Shell code improvements
• Additional commits viewable in <https://github.com/yaml/pyyaml/compare/5.3.1...5.4|compare view>
<https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score>
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
* * *
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• `@dependabot rebase` will rebase this PR
• `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
• `@dependabot merge` will merge this PR after your CI passes on it
• `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
• `@dependabot cancel merge` will cancel a previously requested merge and block automerging
• `@dependabot reopen` will reopen this PR if it is closed
• `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
• `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
• `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
• `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the <https://github.com/Disfactory/Disfactory/network/alerts|Security Alerts page>.
:white_check_mark: All checks have passed