Log message:
pytest from versioned depends

Log message:
py-bleach: updated to 3.1.5

Version 3.1.5:
Bug fixes
* replace missing ``setuptools`` dependency with ``packaging``.

Log message:
py-bleach: updated to 3.1.4

Version 3.1.4:

Security fixes

* ``bleach.clean`` behavior parsing style attributes could result in a
  regular expression denial of service (ReDoS).

  Calls to ``bleach.clean`` with an allowed tag with an allowed
  ``style`` attribute were vulnerable to ReDoS. For example,
  ``bleach.clean(..., attributes={'a': ['style']})``.

  This issue was confirmed in Bleach versions v3.1.3, v3.1.2, v3.1.1,
  v3.1.0, v3.0.0, v2.1.4, and v2.1.3. Earlier versions used a similar
  regular expression and should be considered vulnerable too.

  Anyone using Bleach <=v3.1.3 is encouraged to upgrade.

Backwards incompatible changes

* Style attributes with dashes, or single or double quoted values are
  cleaned instead of passed through.

Log message:
py-bleach: updated to 3.1.3

Version 3.1.3:

**Features**

* Add relative link to code of conduct.
* Drop deprecated 'setup.py test' support.
* Fix typo: curren -> current in tests/test_clean.py
* Test on PyPy 7
* Drop test support for end of life Python 3.4

Version 3.1.2:

**Security fixes**

* ``bleach.clean`` behavior parsing embedded MathML and SVG content
  with RCDATA tags did not match browser behavior and could result in
  a mutation XSS.

  Calls to ``bleach.clean`` with ``strip=False`` and ``math`` or
  ``svg`` tags and one or more of the RCDATA tags ``script``,
  ``noscript``, ``style``, ``noframes``, ``iframe``, ``noembed``, or
  ``xmp`` in the allowed tags whitelist were vulnerable to a mutation
  XSS.

  This security issue was confirmed in Bleach version v3.1.1. Earlier
  versions are likely affected too.

Version 3.1.1:

**Security fixes**

* ``bleach.clean`` behavior parsing ``noscript`` tags did not match
  browser behavior.

  Calls to ``bleach.clean`` allowing ``noscript`` and one or more of
  the raw text tags (``title``, ``textarea``, ``script``, ``style``,
  ``noembed``, ``noframes``, ``iframe``, and ``xmp``) were vulnerable
  to a mutation XSS.

  This security issue was confirmed in Bleach versions v2.1.4, v3.0.2,
  and v3.1.0. Earlier versions are probably affected too.

Log message:
py-bleach: updated to 3.1.0

Version 3.1.0:
**Features**
* Add recognized_tags argument to the linkify Linker class. This
  fixes issues when linkifying on its own and having some tags get escaped.
  It defaults to a list of HTML5 tags.

**Bug fixes**
* Add six>=1.9 to requirements.
* Fix cases where attribute names could have invalid characters in them.
* Fix problems with LinkifyFilter not being able to match links
  across &.
* Fix InputStreamWithMemory when the BleachHTMLParser is
  parsing meta tags.
* Fix doctests.

Log message:
Deal with gratuitous use of "/bin/bash" (in a one-line script, no
less).

Log message:
py-bleach: updated to 3.0.2

Version 3.0.2:

Bug fixes

 Merge Characters tokens after sanitizing them. This fixes issues in the
  LinkifyFilter where it was only linkifying parts of urls.

Version 3.0.1:

Features

 Support Python 3.7. It supported Python 3.7 just fine, but we added 3.7 to
  the list of Python environments we test so this is now officially supported.

Bug fixes

 Fix list object has no attribute lower in clean.
 Fix abbr getting escaped in linkify.

Version 3.0.0:

Backwards incompatible changes

 A bunch of functions were moved from one module to another.

  These were moved from bleach.sanitizer to bleach.html5lib_shim:

   convert_entity
   convert_entities
   match_entity
   next_possible_entity
   BleachHTMLSerializer
   BleachHTMLTokenizer
   BleachHTMLParser

  These functions and classes weren't documented and aren't part of the
  public API, but people read code and might be using them so we're
  considering it an incompatible API change.

  If you're using them, you'll need to update your code.

Features

 Bleach no longer depends on html5lib. html5lib==1.0.1 is now vendored into
  Bleach. You can remove it from your requirements file if none of your other
  requirements require html5lib.

  This means Bleach will now work fine with other libraries that depend on
  html5lib regardless of what version of html5lib they require.

Bug fixes
 Fixed tags getting added when using clean or linkify. This was a
  long-standing regression from the Bleach 2.0 rewrite.

 Fixed <isindex> getting replaced with a string. Now it gets escaped or
  stripped depending on whether it's in the allowed tags or not.

Log message:
py-bleach: updated to 2.1.4

Version 2.1.4:
Dropped support for Python 3.3.
Handle ambiguous ampersands in correctly.