Skip to content

Bump tinytag from 2.2.0 to 2.2.1#40

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/tinytag-2.2.1
Open

Bump tinytag from 2.2.0 to 2.2.1#40
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/tinytag-2.2.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps tinytag from 2.2.0 to 2.2.1.

Release notes

Sourced from tinytag's releases.

2.2.1

  • ID3: Prevent infinite loop due to malformed SYLT strings
Commits
  • 7bd4e39 Release 2.2.1 (#282)
  • f14138e Bump copyright year
  • 27eb449 Merge pull request #281 from mathiascode/id3-sylt-no-terminator-fix
  • 44e4963 ID3: Bail out if SYLT offset exceeds content length
  • 5cd3215 ID3: Ensure string end position is never smaller than start position
  • 1d23f6f Bump actions/download-artifact from 7 to 8 (#280)
  • 96568d0 Bump actions/upload-artifact from 6 to 7 (#279)
  • f832e5b Bump actions/cache from 4 to 5 (#278)
  • bd91f5f Bump actions/upload-artifact from 5 to 6 (#277)
  • 487c48b Bump actions/download-artifact from 5 to 7 (#276)
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 19, 2026
Bumps [tinytag](https://github.com/tinytag/tinytag) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/tinytag/tinytag/releases)
- [Commits](tinytag/tinytag@2.2.0...2.2.1)

---
updated-dependencies:
- dependency-name: tinytag
  dependency-version: 2.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/uv/tinytag-2.2.1 branch from 0bbd272 to 0320fdf Compare April 6, 2026 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants