build(deps): bump remarshal from 2.0.1 to 2.1.0 in /csv

[dependabot]

Bumps remarshal from 2.0.1 to 2.1.0.

Release notes

Sourced from remarshal's releases.

v2.1.0

• Added the option --yaml-tags to convert YAML tags to and from other formats, which don't have native tag support. This also enables tag manipulation in Starlark. When the option is used, a tag like !secret is represented as a single-key mapping like {"!secret": "x"} during conversion.
• Add --yaml-expand-aliases to group --expand-aliases with other YAML-specific options. --expand-aliases remains as a hidden alias for backward compatibility.

v2.0.2

• Upgraded the Starlark dependency to version 0.5.x (>= 0.5, < 0.6). The new version better enforces resource limits and fixes raw Python exceptions being raised on some errors.

Commits

• bc78d29 build(version): bump to 2.1.0
• 6644906 build(deps/pytest): upgrade
• 85eb0fe feat(cli): add --yaml-expand-aliases
• aa02155 feat(cli): add option --yaml-tags
• 0f8026c build(version): bump to 2.0.2
• c2ab737 build(deps/starlark): upgrade
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

csv/requirements.txt

Package	Version	License	Issue Type
remarshal	2.1.0	Null	Unknown License

Allowed Licenses:

0BSD, Apache-2.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, MIT, MIT-0

OpenSSF Scorecard

Package	Version	Score	Details
pip/remarshal	2.1.0	Unknown	Unknown

Scanned Files

• csv/requirements.txt