Skip to content

chore(deps): update rpyc requirement from ~=6.0.0 to ~=6.0.2 - #37

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/rpyc-approx-eq-6.0.2
Open

chore(deps): update rpyc requirement from ~=6.0.0 to ~=6.0.2#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/rpyc-approx-eq-6.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown

Updates the requirements on rpyc to permit the latest version.

Changelog

Sourced from rpyc's changelog.

6.0.2

Date: 2024-04-18

  • Maintenance release

6.0.1

Date: 2024-09-24

  • Minor fixes to class module id packs and related unittest assertions
  • [#559](https://github.com/tomerfiliba-org/rpyc/issues/559)_ closes [#558](https://github.com/tomerfiliba-org/rpyc/issues/558)_ which reported issues with proxy cache referrant race conditions, get_method errors, and stream issues
  • [#557](https://github.com/tomerfiliba-org/rpyc/issues/557)_ fix pytest issues reported in [#544](https://github.com/tomerfiliba-org/rpyc/issues/544)_

.. _#559: tomerfiliba-org/rpyc#559 .. _#558: tomerfiliba-org/rpyc#558 .. _#557: tomerfiliba-org/rpyc#557 .. _#544: tomerfiliba-org/rpyc#544

6.0.0

Date: 2024-02-23

  • [#551](https://github.com/tomerfiliba-org/rpyc/issues/551)_ Resolves security issue that results in RCE. The fix breaks backwards compatibility for those that rely on the __array__ attribute used by numpy. This RCE is only exploitable when the server-side gets the attribute __array__ and calls it (e.g., np.array(x)). This issues effects all versions since major release 4.

.. _#551: tomerfiliba-org/rpyc#551

5.3.1

Date: 2023-02-21

  • [#527](https://github.com/tomerfiliba-org/rpyc/issues/527)_ Resolved timeout issue that was introduced in 5.2.1

  • [#525](https://github.com/tomerfiliba-org/rpyc/issues/525)_ and [#524](https://github.com/tomerfiliba-org/rpyc/issues/524)_ Fixed experimental thread binding struct for platforms where unsigned long is 8-bits

    • While the fix for thread binding is not backwards compatible, it only impacts people using an experimental feature. Hence, I did a patch version bump.

.. _#525: tomerfiliba-org/rpyc#525 .. _#524: tomerfiliba-org/rpyc#524 .. _#527: tomerfiliba-org/rpyc#527

5.3.0

Date: 2022-11-25

  • [#515](https://github.com/tomerfiliba-org/rpyc/issues/515)_ Support for Python 3.11 is available after teleportation bug fix
  • [#507](https://github.com/tomerfiliba-org/rpyc/issues/507)_ Experimental support for threading is added (default is disabled for now)
  • [#516](https://github.com/tomerfiliba-org/rpyc/issues/516)_ Resolved server-side exceptions due to the logic for checking if a name is in ModuleNamespace
  • [#511](https://github.com/tomerfiliba-org/rpyc/issues/511)_ Improved documentation on the life-cycle of a netref/proxy-object

... (truncated)

Commits
  • fd96f3b Release 6.0.2
  • 28152fd Updated owner path segment for GitHub links in docs/install.rst and CONTRIBUT...
  • b3bda28 Updated location to context manager docs
  • 33056ff Removed reference to IronPython 2.7 since latest RPyC dropped EOL python vers...
  • 976d880 Fixed linkcheck for sourceforge by setting user agent; changed sourceforge li...
  • cb2cf82 Mass update of moved links to reduce sphinx linkcheck noise
  • 37cf3ce Corrected link to pull request docs by GitHub
  • af3bf01 Switched dead link to internet archive for the write up by David Mertz.
  • 0f615fc Removed broken link to Travis CI as it was deprecated in favor of GitHub Actions
  • e514d78 Removed references to EOL Python2 to shorten the read and keep it relevant to...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Updates the requirements on [rpyc](https://github.com/tomerfiliba-org/rpyc) to permit the latest version.
- [Release notes](https://github.com/tomerfiliba-org/rpyc/releases)
- [Changelog](https://github.com/tomerfiliba-org/rpyc/blob/6.0.2/CHANGELOG.rst)
- [Commits](tomerfiliba-org/rpyc@6.0.0...6.0.2)

---
updated-dependencies:
- dependency-name: rpyc
  dependency-version: 6.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 4, 2026
@coveralls-official

coveralls-official Bot commented Jun 4, 2026

Copy link
Copy Markdown

Coverage Status

coverage: 79.421%. remained the same — dependabot/pip/rpyc-approx-eq-6.0.2 into main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants