v1.0.1
What's Changed
Fixes & Changes
- Cleanup: pytest-celery[all]==1.0.0b4 -> pytest-celery[all]==1.0.0 by @Nusnus in #330
- Fixed hybrid_setup example build error with legacy.Dockerfile by @Nusnus in #331
- Fix typos by @yenshirak in #339
- Prepare for release: v1.0.1 by @Nusnus in #351
- Added changelog for v1.0.1 by @Nusnus in #350
Security Fixes
- CVE-2024-39689: Certifi removes GLOBALTRUST root certificate
- CVE-2024-3651: Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
- CVE-2024-34064: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
- GHSA-753j-mpmx-qq6g: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
- GHSA-w235-7p84-xx57: Tornado has a CRLF injection in CurlAsyncHTTPClient headers
- CVE-2024-37891: urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
- CVE-2024-5569: zipp Denial of Service vulnerability
- CVE-2024-35195: Requests Session object does not verify requests after making first request with verify=False
Dependencies Updates
- Build(deps-dev): Bump black from 24.3.0 to 24.4.0 by @dependabot in #289
- Build(deps): Bump setuptools from 69.2.0 to 69.5.1 by @dependabot in #290
- Build(deps-dev): Bump types-redis from 4.6.0.20240409 to 4.6.0.20240417 by @dependabot in #292
- Build(deps): Bump celery from 5.3.6 to 5.4.0 by @dependabot in #293
- Build(deps-dev): Bump types-redis from 4.6.0.20240417 to 4.6.0.20240423 by @dependabot in #295
- Build(deps-dev): Bump coverage from 7.4.4 to 7.5.0 by @dependabot in #296
- Build(deps-dev): Bump mypy from 1.9.0 to 1.10.0 by @dependabot in #298
- Build(deps-dev): Bump black from 24.4.0 to 24.4.1 by @dependabot in #299
- Build(deps-dev): Bump types-redis from 4.6.0.20240423 to 4.6.0.20240425 by @dependabot in #300
- Build(deps): Bump redis from 5.0.3 to 5.0.4 by @dependabot in #297
- Build(deps-dev): Bump black from 24.4.1 to 24.4.2 by @dependabot in #301
- Build(deps-dev): Bump pytest from 8.1.1 to 8.2.0 by @dependabot in #302
- Build(deps-dev): Bump pytest-xdist from 3.5.0 to 3.6.1 by @dependabot in #303
- Build(deps-dev): Bump coverage from 7.5.0 to 7.5.1 by @dependabot in #306
- Build(deps-dev): Bump sphinx-click from 5.1.0 to 6.0.0 by @dependabot in #308
- Build(deps-dev): Bump pytest from 8.2.0 to 8.2.1 by @dependabot in #309
- Revert "Build(deps-dev): Bump pytest from 8.2.0 to 8.2.1" by @Nusnus in #310
- Pinned requests to v2.31.0 due to docker-py bug #3256 by @Nusnus in #313
- Build(deps-dev): Bump pytest from 8.2.0 to 8.2.1 by @dependabot in #311
- Build(deps): Bump setuptools from 69.5.1 to 70.0.0 by @dependabot in #312
- Build(deps): Bump docker from 7.0.0 to 7.1.0 by @dependabot in #315
- Fixed docker-py & requests issue by @Nusnus in #316
- Build(deps-dev): Bump coverage from 7.5.1 to 7.5.2 by @dependabot in #317
- Build(deps-dev): Bump coverage from 7.5.2 to 7.5.3 by @dependabot in #319
- Build(deps-dev): Bump pytest from 8.2.1 to 8.2.2 by @dependabot in #320
- Build(deps): Bump redis from 5.0.4 to 5.0.5 by @dependabot in #321
- Build(deps): Bump redis from 5.0.5 to 5.0.6 by @dependabot in #323
- Build(deps): Bump psutil from 5.9.8 to 6.0.0 by @dependabot in #325
- Build(deps): Bump setuptools from 70.0.0 to 70.1.0 by @dependabot in #327
- Build(deps-dev): Bump coverage from 7.5.3 to 7.5.4 by @dependabot in #328
- Build(deps-dev): Bump mypy from 1.10.0 to 1.10.1 by @dependabot in #329
- Build(deps): Bump setuptools from 70.1.0 to 70.1.1 by @dependabot in #332
- Build(deps): Bump debugpy from 1.8.1 to 1.8.2 by @dependabot in #333
- Build(deps): Bump redis from 5.0.6 to 5.0.7 by @dependabot in #334
- Build(deps): Bump setuptools from 70.1.1 to 70.2.0 by @dependabot in #336
- Build(deps): Bump certifi from 2024.2.2 to 2024.7.4 by @dependabot in #337
- Build(deps-dev): Bump pytest-subtests from 0.12.1 to 0.13.0 by @dependabot in #338
- Build(deps): Bump setuptools from 70.2.0 to 70.3.0 by @dependabot in #340
- Build(deps-dev): Bump coverage from 7.5.4 to 7.6.0 by @dependabot in #341
- Changed "retry" dependency to "tenacity" by @Nusnus in #342
- Build(deps): Bump idna from 3.6 to 3.7 by @dependabot in #343
- Build(deps-dev): Bump jinja2 from 3.1.3 to 3.1.4 by @dependabot in #344
- Build(deps-dev): Bump tornado from 6.4 to 6.4.1 by @dependabot in #345
- Build(deps): Bump urllib3 from 2.2.1 to 2.2.2 by @dependabot in #346
- Build(deps-dev): Bump zipp from 3.18.0 to 3.19.1 by @dependabot in #347
- Bumping Dependencies by @Nusnus in #348
- Build(deps-dev): Bump pytest-subtests from 0.13.0 to 0.13.1 by @dependabot in #349
New Contributors
- @yenshirak made their first contribution in #339
Full Changelog: v1.0.0...v1.0.1