3.2.5 fixes CVE-2021-35042: Potential SQL injection via unsanitized
QuerySet.order_by() input.
Additional release notes:
- Fixed a regression in Django 3.2 that caused a crash of
QuerySet.values_list(…, named=True) after prefetch_related() (#32812).
- Fixed a bug in Django 3.2 that caused a migration crash on MySQL 8.0.13+
when altering BinaryField, JSONField, or TextField to non-nullable
(#32503).
- Fixed a regression in Django 3.2 that caused a migration crash on MySQL
8.0.13+ when adding nullable BinaryField, JSONField, or TextField with a
default value (#32832).
- Fixed a bug in Django 3.2 where a system check would crash on a model
with an invalid app_label (#32863).
There is no corresponding uprev for the 2.x LTS branch since it is
already at the latest version (2.2.24).
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Test fixes for CPython 3.10.0b3
Support for sys.unraisablehook() on Python >= 3.8
Fix two minor memory leaks (thanks Sebastian!)
Like many projects that had an IRC channel on freenode, we moved it to irc.libera.chat.
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Features
artifactregistry: update the api bc9a38b (a933dad)
chat: update the api eea3c5c (a933dad)
cloudasset: update the api 2e31dd0 (a933dad)
cloudbuild: update the api 3a3b420 (a933dad)
composer: update the api 78c0d8d (a933dad)
container: update the api a54737f (a933dad)
datafusion: update the api f6bf3c6 (a933dad)
dataproc: update the api 3fde9a3 (a933dad)
documentai: update the api 79c556d (a933dad)
groupssettings: update the api d537f96 (a933dad)
logging: update the api d3548c5 (a933dad)
monitoring: update the api d24af68 (a933dad)
paymentsresellersubscription: update the api cff9039 (a933dad)
redis: update the api 46102d1 (a933dad)
run: update the api db18e29 (a933dad)
slides: update the api 68634cd (a933dad)
spanner: update the api 2895121 (a933dad)
storagetransfer: update the api 24895f1 (a933dad)
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Add a recipe for joblib: a set of tools to provide lightweight pipelining
in Python.
Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Fix for AWSLambda Integration to handle other path formats for function initial handler
Fix for worker to set deamon attribute instead of deprecated setDaemon method
Fix for bottle Integration that discards -dev for version extraction
Fix for transport that adds a unified hook for capturing metrics about dropped events
Add Httpx Integration
Add support for china domains in AWSLambda Integration
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.1.2:
- Added the following accessor methods for cmd2-specific
attributes to the argparse.Action class:
* get_choices_callable()
* set_choices_provider()
* set_completer()
* get_descriptive_header()
* set_descriptive_header()
* get_nargs_range()
* set_nargs_range()
* get_suppress_tab_hint()
* set_suppress_tab_hint()
- Now that set_choices_provider() and set_completer() have been
added as methods to the argparse.Action class, the standalone
functions of the same name will be removed in version 2.2.0.
To update to the new convention, do the following:
* Change set_choices_provider(action, provider) to
action.set_choices_provider(provider)
* Change set_completer(action, completer) to
action.set_completer(completer)
License-Update: Update years
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 8.3.1:
- Catch OSError when checking if fp is sys.stdout
- Handle removing orientation from alternate types of EXIF data
- Make Image.__array__ take optional dtype argument
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.6.2:
- Fix a crash when the inference of the length of a node failed
- Fix unhandled StopIteration during inference, following the
implementation of PEP479 in python 3.7+
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
0.18.0, 2021-06-28
* Fix#209 Update freeze recurse into pyrsistent data structures and thaw to recurse into lists and dicts,
Thanks @phil-arh for this!
NB! This is a backwards incompatible change! To keep the old behaviour pass `strict=False` to freeze and thaw.
* Fix#226, stop using deprecated exception.message. Thanks @hexagonrecursion for this!
* Fix#211, add union operator to persistent maps. Thanks @bowbahdoe for this!
* Fix#194, declare build dependencies through pyproject.toml. Thanks @jaraco for this!
* Officially drop Python 3.5 support.
* Fix#223, release wheels for all major platforms. Thanks @johnthagen for helping out with this!
* Fix#221, KeyError obscured by TypeError if key is a tuple. Thanks @ganwell for this!
* Fix LICENSE file name spelling. Thanks @ndowens and @barentsen for this!
* Fix#216, add abstractmethod decorator for CheckedType and ABCMeta for _CheckedTypeMeta. Thanks @ss18 for this!
* Fix#228, rename example classes in tests to avoid name clashes with pytest.
-License-Update: Copyright year updated to 2021.
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
0.38.0 - 2021-06-14
-------------------
- Remove the last use of setup.py test idiom.
- Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
- Add support for arm64 big endian <Steev Klimaszewski>
- Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
- Move project to src/ layout
- Allow verify_cb_* to be called with ok=True <Casey Deccio>
- Be prepared if any of constants in x509_vfy.h is not available.
- But we do support 3.8
- We DO NOT support Python 2.6.
Refresh the following patch:
cross-compile-platform.patch
0001-Allow-verify_cb_-to-be-called-with-ok-True.patch
0001-Use-of-RSA_SSLV23_PADDING-has-been-deprecated.patch
Removed since these are included in 0.38.0
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
0001-setup.py-Correct-the-license-assignment.patch
Removed since this is included in 2.3.1
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
1.26.6 (2021-06-25)
-------------------
* Deprecated the ``urllib3.contrib.ntlmpool`` module. urllib3 is not able to support
it properly due to `reasons listed in this issue <https://github.com/urllib3/urllib3/issues/2282>`_.
If you are a user of this module please leave a comment.
* Changed ``HTTPConnection.request_chunked()`` to not erroneously emit multiple
``Transfer-Encoding`` headers in the case that one is already specified.
* Fixed typo in deprecation message to recommend ``Retry.DEFAULT_ALLOWED_METHODS``.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 7.25.0 with a single bugfix, which is highly
recommended for all users of ipdb, ipython debugger %debug magic
and similar.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.10.0:
analyticsadmin: update the api
androidmanagement: update the api
bigqueryreservation: update the api
dialogflow: update the api
firebaserules: update the api
iap: update the api
keep: update the api
managedidentities: update the api
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Add common protobufs used in Google APIs.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.17.10:
- Bug fix: token with old comment structure != two elements
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
If the version of libssl-dev is not match the version of libssl on the
build machine, it fails to compile SWIG/_m2crypto_wrap.c which is
created by swig for python3-m2crypto-native:
| SWIG/_m2crypto_wrap.c:9757:19: error: dereferencing pointer to
incomplete type 'struct stack_st'
| if (arg1) (arg1)->num = arg2;
| ^~
But it works if no libssl-dev installed on the build machine.
Export STAGING_DIR to make existing patch
0001-setup.py-link-in-sysroot-not-in-host-directories.patch work. And
filter out '/usr/inlucde' from include pathes of swig.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.6.0:
- Appveyor and travis are no longer used in the continuous
integration
- `setuptools_scm`` has been removed and replaced by ``tbump`` in
order to not have hidden runtime dependencies to setuptools
- ``NodeNg``, the base node class, is now accessible from
``astroid`` or ``astroid.nodes`` as it can be used for typing
- pdate enum brain to improve inference of .name and .value
dynamic class attributes
- Removed ``Repr``, ``Exec``, and ``Print`` nodes as the ``ast``
nodes they represented have been removed with the change to
Python 3
- Deprecate ``Ellipsis`` node. It will be removed with the next
minor release
- Deprecated ``Index`` and ``ExtSlice`` nodes
- Updated all Match nodes to be internally consistent
- Add ``Pattern`` base class
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.910:
- Call get_method_hook when methods are used in decorators
- Don't ask to install a stub package if stubs are installed
- [mypyc] Support various number-related dunders
- Fix crash when inferring multiple assignment with overloaded
function
- Replace variable annotation with type comment to fix Python 3.5
- docs: updating URL in comment
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.2.5:
- Fixed regression in concat() between two DataFrame where one has
an Index that is all-None and the other is DatetimeIndex
incorrectly raising
- Fixed regression in DataFrame.sum() and DataFrame.prod() when
min_count and numeric_only are both given
- Fixed regression in read_csv() when using memory_map=True with
an non-UTF8 encoding
- Fixed regression in DataFrame.replace() and Series.replace()
when the values to replace is a NumPy float array
- Fixed regression in ExcelFile() when a corrupt file is opened
but not closed
- Fixed regression in DataFrame.astype() with dtype=str failing
to convert NaN in categorical columns
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Add missing dependency on python3-io for cStringIO
Remove comment about missing modules since _winreg is windows specific
and cStringIO is addressed
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
python3-fastjsonschema claims to be fastest Python implementation of JSON schema
it however needs additional packages which are also added here, since
they are all dependent, its added in single commit so backporting is
simpler
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Version 2.2.24 contains a fix for CVE-2021-33571 and is the latest LTS
release.
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 0.902:
- Move third-party library stubs to stub packages, allowing newer
stubs to be easily used without updating mypy
- Support pyproject.toml and type guards
- Ship wheels for Apple Silicon
- Many other features and bug fixes
License-Update: Update copyright year
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
