Fix a security issue where eval(pre_dispatch) could potentially run
arbitrary code. Now only basic numerics are supported.
joblib/joblib#1327
Release 1.1.0
Fix byte order inconsistency issue during deserialization using joblib.load
in cross-endian environment: the numpy arrays are now always loaded to
use the system byte order, independently of the byte order of the system
that serialized the pickle.
joblib/joblib#1181
Fix joblib.Memory bug with the ignore parameter when the cached function
is a decorated function.
joblib/joblib#1165
Fix joblib.Memory to properly handle caching for functions defined
interactively in a IPython session or in Jupyter notebook cell.
joblib/joblib#1214
Update vendored loky (from version 2.9 to 3.0) and cloudpickle (from
version 1.6 to 2.0)
joblib/joblib#1218
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Lee-CBG/ATM-TCR/network/alerts).
Bumps joblib from 1.0.1 to 1.1.1.
Changelog
Sourced from joblib's changelog.
Commits
f08737dRelease 1.1.1 (#1352)d9302a1Release 1.1.0dbf0a57MAINT: bump dependencies in CI (#1227)0730b77Handle new naming scheme in newer Jupyter notebook (#1214)9c6cc4cUpdate of mmap_mode description (#1203)1384882MAINT fix setup.py warning (#1191)96c8e1cVendor up (#1218)0426d6bENH Add check_call_in_cache method to check cache without calling function (#...0fa2cb9Fixing byte-order consistency/mismatch for cross-endian platform (#1181)e96152fAdd ReadTheDocs badge in READMEDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Lee-CBG/ATM-TCR/network/alerts).