Upgrade to release 3.2.4:
- CVE-2021-33203: Potential directory traversal via admindocs
- CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks
since validators accepted leading zeros in IPv4 addresses
- Fixed a bug in Django 3.2 where a final catch-all view in the
admin didn't respect the server-provided value of SCRIPT_NAME
when redirecting unauthenticated users to the login page.
- Fixed a bug in Django 3.2 where a system check would crash on an
abstract model
- Prevented unnecessary initialization of unused caches following
a regression in Django 3.2
- Fixed a crash in Django 3.2 that could occur when running
mod_wsgi with the recommended settings while the Windows
colorama library was installed
- Fixed a bug in Django 3.2 that would trigger the auto-reloader
for template changes when directory paths were specified with
strings
- Fixed a regression in Django 3.2 that caused a crash of
auto-reloader with AttributeError, e.g. inside a Conda
environment
- Fixed a regression in Django 3.2 that caused a loss of precision
for operations with DecimalField on MySQL
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.17.7:
- issue 385 also affected other deprecated loaders
- merged type annotations update provided by Jochen Sprickerhof
- fix for issue 385: deprecated round_trip_loader function not
working
- fix for issue 384 !!set with aliased entry resulting in broken
YAML on rt
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 7.24.0:
- Fix an issue where %recall would both succeeded and print an
error message it failed
- Drop support for NumPy 1.16 – practically has no effect beyond
indicating in package metadata that we do not support it
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2021.4.29:
- Don't set latest on codecov flags
- Lower PyTest requirement to 6.0.0, test several pytest versions
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.6.0:
- adexchangebuyer2: update the api
- cloudasset: update the api
- composer: update the api
- compute: update the api
- dfareporting: update the api
- dialogflow: update the api
- displayvideo: update the api
- gkehub: update the api
- healthcare: update the api
- retail: update the api
- sasportal: update the api
- servicedirectory: update the api
- servicemanagement: update the api
- servicenetworking: update the api
- servicenetworking: update the api
- spanner: update the api
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.11.0:
- Added notice about needing a new maintainer.
- Fixed link to Travis CI.
- Added test.py to the source distribution.
- Fixed netmask calculation for IPv6.
- Fixes to gateway detection in some edge cases.
- Build CPython 2.7 wheels for 64-bit Windows (yes, you should be
using Python 3 now, but still).
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.5.7:
- Fix six.with_metaclass transformation so it doesn't break user
defined transformations
- Fix detection of relative imports
- Fix inference of instance attributes defined in base classes
- Update `infer_named_tuple` brain to reject namedtuple
definitions that would raise ValueError
- Do not set instance attributes on builtin object()
- Fix some spurious cycles detected in ``context.path`` leading to
more cases that can now be inferred
- Add ``kind`` field to ``Const`` nodes, matching the structure of
the built-in ast Const. The kind field is "u" if the literal is
a u-prefixed string, and ``None`` otherwise.
- Fix property inference in class contexts for properties defined
on the metaclass
- Update enum brain to fix definition of __members__ for
subclass-defined Enums
- Update random brain to fix a crash with inference of some
sequence elements
- Fix inference of attributes defined in a base class that is an
inner class
- Allow inferring a return value of None for non-abstract empty
functions and functions with no return statements (implicitly
returning None)
- scm_setuptools has been added to the packaging.
- Astroid's tags are now the standard form ``vX.Y.Z`` and not
``astroid-X.Y.Z`` anymore.
- Add initial support for Pattern Matching in Python 3.10
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 3.6.0:
- Add pluralization for intword
- Add es_ES '%s and %s' translation
- Add gender support for ordinals
- Add type hints for all exposed natural* functions
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
This recipe points to an unmaintained uri
Switch to the official project.
Moved package to meta-networking
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 22.1.0:
- asyncio: experimental support for Proactor eventloop if tornado
6.1 is available by running a selector in a background thread.
- Windows: fix type of `socket.FD` option in win-amd64
- asyncio: Cancel timers when using HWM with async Sockets
- Windows: update bundled libzmq dll URLs for Windows.
- adopt pre-commit for formatting, linting
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 9.1:
- Fix a security issue introduced in version 8.0:
Version 8.0 was vulnerable to timing attacks on HTTP Basic Auth
passwords.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.6.5:
- Fixed issue where dialect-specific keyword arguments within the
DropIndex operation directive would not render in the
autogenerated Python code. As support was improved for adding
dialect specific arguments to directives as part of #803, in
particular arguments such as "postgresql_concurrently" which
apply to the actual create/drop of the index, support was needed
for these to render even in a drop index operation.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.17.0:
- Keys that use explicit curve parameters can now be read and
written. Reading of explicit curves can be disabled by using
the valid_curve_encodings keyword argument in
VerifyingKey.from_pem(), VerifyingKey.from_der(),
SigningKey.from_pem(), and SigningKey.from_der().
- Keys can now be written with use of explicit curve parameters,
use curve_parameters_encoding keyword argument of
VerifyingKey.to_pem(), VerifyingKey.to_der(),
SigningKey.to_pem(), or SigningKey.to_der() to specify the
format. By default named_curve will be used, unless the curve
doesn't have an associated OID (as will be the case for an
unsupported curve), then explicit encoding will be used.
- Allow specifying acceptable point formats when loading public
keys (this also fixes a minor bug where python-ecdsa would
accept raw encoding for points in PKCS#8 files). Set of accepted
encodings is controlled by valid_encodings keyword argument in
ECDH.load_received_public_key_bytes(),
VerifyingKey.from_string(), VerifyingKey.from_pem(),
VerifyingKey.from_der().
- PointJacobi and Point now inherit from AbstractPoint that
implements the methods for parsing points. That added
from_bytes() and to_bytes() methods to both of them.
- Curve parameters can now be read and written to PEM and DER
files. The Curve class supports new to_der(), from_der(),
to_pem(), and from_pem() methods.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 3.1.0:
- AddValue is similar to the old AutoNumber: it will always
activate, but uses _generate_next_value_ to get the next value
(so the user has some control over the return data type instead
of always getting an int).
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 4.0.3:
- Regression using TypedDict as type hint
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 5.3.0:
- Document WebSocket support for threading mode
- Allow functions to be used for URL, headers and auth data in
client connection
- Emit events to multiple rooms
- More descriptive error when joining a room on a bad namespace
- Document the use of arguments in the connect_error handler
- Document that callbacks cannot be used in external processes
- Improve start_background_task() example in the documentation
- Added Open Collective funding option
- Remove Python 2 from PyPI classifiers
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.0.1:
- Fix type annotation for send_file max_age callable. Don't pass
pathlib.Path to max_age.
- Mark top-level names as exported so type checking understands
imports in user projects.
- Fix some types that weren't available in Python 3.6.0.
- cached_property is generic over its return type, properties
decorated with it report the correct type.
- Fix multipart parsing bug when boundary contains special regex
characters.
- Type checking understands that calling headers.get with a string
default will always return a string.
- If HTTPException.description is not a string, get_description
will convert it to a string.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 5.0.3:
- Document the use of simple-websocket with the development web
server
- Show transport in example apps
- Added Open Collective funding option
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.15.1:
- Add python_requires metadata to avoid installing on unsupported
Python versions.
- Drop support for Python < 3.6.
- FileSize validator.
- Extra requirement email installs the email_validator package.
- Fixed Flask 2.0 warnings.
- Various documentation fixes.
- Various CI fixes.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.0.1:
- Re-add the filename parameter in send_from_directory. The
filename parameter has been renamed to path, the old name is
deprecated.
- Mark top-level names as exported so type checking understands
imports in user projects.
- Fix type annotation for g and inform mypy that it is a namespace
object that has arbitrary attributes.
- Fix some types that weren’t available in Python 3.6.0.
- Improve typing for send_file, send_from_directory, and
get_send_file_max_age.
- Show an error when a blueprint name contains a dot. The . has
special meaning, it is used to separate (nested) blueprint names
and the endpoint name.
- Combine URL prefixes when nesting blueprints that were created
with a url_prefix value.
- Roll back a change to the order that URL matching was done. The
URL is again matched after the session is loaded, so the session
is available in custom URL converters.
- Re-add deprecated Config.from_json, which was accidentally
removed early.
- Improve typing for some functions using Callable in their type
signatures, focusing on decorator factories.
- Nested blueprints are registered with their dotted name. This
allows different blueprints with the same name to be nested at
different locations.
- register_blueprint takes a name option to change the (pre-dotted)
name the blueprint is registered with. This allows the same
blueprint to be registered multiple times with unique names for
url_for. Registering the same blueprint with the same name
multiple times is deprecated. #1091
- Improve typing for stream_with_context.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.4.15:
- A new approach has been applied to the warnings system in
SQLAlchemy to accurately predict the appropriate stack level for
each warning dynamically. This allows evaluating the source of
SQLAlchemy-generated warnings and deprecation warnings to be
more straightforward as the warning will indicate the source
line within end-user code, rather than from an arbitrary level
within SQLAlchemy’s own source code.
orm:
- Fixed additional regression caused by “eager loaders run on
unexpire” feature #1763 where the feature would run for a
contains_eager() eagerload option in the case that the
contains_eager() were chained to an additional eager loader
option, which would then produce an incorrect query as the
original query-bound join criteria were no longer present.
- Fixed issue in subquery loader strategy which prevented caching
from working correctly. This would have been seen in the logs as
a “generated” message instead of “cached” for all subqueryload
SQL emitted, which by saturating the cache with new keys would
degrade overall performance; it also would produce “LRU size
alert” warnings.
sql:
- Adjusted the logic added as part of #6397 in 1.4.12 so that
internal mutation of the BindParameter object occurs within the
clause construction phase as it did before, rather than in the
compilation phase. In the latter case, the mutation still
produced side effects against the incoming construct and
additionally could potentially interfere with other internal
mutation routines.
mysql:
- Added support for the ssl_check_hostname= parameter in mysql
connection URIs and updated the mysql dialect documentation
regarding secure connections. Original pull request courtesy of
Jerry Zhao.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.6.4:
- Fixed regression caused by just fixed bug that scaled back the
filter for unique=True/index=True too far such that these
directives no longer worked for the op.create_table() op, this
has been fixed.
- Fixed 1.6-series regression where UniqueConstraint and to a
lesser extent Index objects would be doubled up in the generated
model when the unique=True / index=True flags were used.
- Fixed a bug where paths defined in post-write hook options would
be wrongly escaped in non posix environment (Windows).
- Fixed regression where a revision file that contained its own
down revision as a dependency would cause an endless loop in the
traversal logic.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.6.2:
- Fix for issue key/keyref with dynamic types
- Change default decoding of mixed content with only text to a
string instead of a dictionary
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 8.0.1:
- Mark top-level names as exported so type checking understand
imports in user projects.
- Annotate Context.obj as Any so type checking allows all
operations on the arbitrary object.
- Fix some types that weren’t available in Python 3.6.0.
- Fix type checking for iterating over ProgressBar object.
- The importlib_metadata backport package is installed on Python
< 3.8.
- Arguments with nargs=-1 only use env var value if no command
line values are given.
- Flag options guess their type from flag_value if given, like
regular options do from default.
- Added documentation that custom parameter types may be passed
already valid values in addition to strings.
- Resolving commands returns the name that was given, not
command.name, fixing an unintended change to help text and
default_map lookups. When using patterns like AliasedGroup,
override resolve_command to change the name that is returned
if needed.
- If a default value is invalid, it does not prevent showing
help text.
- Pass windows_expand_args=False when calling the main command to
disable pattern expansion on Windows. There is no way to escape
patterns in CMD, so if the program needs to pass them on as-is
then expansion must be disabled.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.1.2:
- [mac] Fix relative path handling for non-recursive watch.
- [windows] On PyPy, events happening right after start() were
missed. Add a workaround for that.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Add a recipe for asyncio-glib - an interface between asyncio and the
GLib event loop for Python.
Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
pulseaudio is an empty package. It needs libpulse.so to run, which is provided by libpulse package.
When running python3-pulsectl, It needs the modules in python3-ctypes.
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
