SAFEHR-data / PIXL

PIXL Image eXtraction Laboratory
Apache License 2.0
8 stars 0 forks source link

chore(deps): renovate: dependency azure-identity to v1.16.1 [security] - autoclosed #433

Closed renovate[bot] closed 3 months ago

renovate[bot] commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
azure-identity (source) ==1.12.0 -> ==1.16.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.


Release Notes

Azure/azure-sdk-for-python (azure-identity) ### [`v1.16.1`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.16.1) ##### 1.16.1 (2024-06-11) ##### Bugs Fixed - Managed identity bug fixes ### [`v1.16.0`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-ai-ml_1.16.0) #### 1.16.0 (2024-05-14) ##### Features Added - Add experimental support for working with Promptflow evaluators: `ml_client.evaluators`. - Many changes to the Connection entity class and its associated operations. - Workspace Connection `list`, `get`, and `create_or_update` operations now include an optional `populate_secrets` input, which causes the operations to try making a secondary call to fill in the returned connections' credential info if possible. Only works with api key-based credentials for now. - Many workspace connection subtypes added. The full list of subclasses is now: - `AzureBlobStoreConnection` - `AzureBlobStoreConnection` - `MicrosoftOneLakeConnection` - `AzureOpenAIConnection` - `AzureAIServicesConnection` - `AzureAISearchConnection` - `AzureContentSafetyConnection` - `AzureSpeechServicesConnection` - `APIKeyConnection` - `OpenAIConnection` - `SerpConnection` - `ServerlessConnection` - Many workspace connections only accept api keys or entra ids for credentials. Since Entra IDs require not inputs, these have been refactored to not required a full credential object. Instead they only accept an api_key as a top-level input, and default to an entra credential otherwise. Their YAML schemas have been similarly altered. - Client-side credential-type validation added for some workspace connection types. - Added new credential type: `AadCredentialConfiguration` - Renamed WorkspaceHub class as Hub. - Added Project entity class and YAML support. - Project and Hub operations supported by workspace operations. - workspace list operation supports type filtering. - Add support for Microsoft Entra token (`aad_token`) auth in `invoke` and `get-credentials` operations. - Add experimental support for working with indexes: `ml_client.indexes` ##### Breaking Changes - Removed WorkspaceHubConfig entity, and renamed WorkspaceHub to Hub. - workspace_hub input of Workspace class hidden, renamed to hub_id, and re-surfaced in child class Project. - Removed Workspace Hub Operations from ML Client. ### [`v1.15.0`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.15.0) #### 1.15.0 (2023-10-26) ##### Features Added - Added bearer token provider. ([#​32655](https://togithub.com/Azure/azure-sdk-for-python/pull/32655)) ##### Bugs Fixed - Fixed issue InteractiveBrowserCredential does not hand over to next credential in chain if no browser is supported.([#​32276](https://togithub.com/Azure/azure-sdk-for-python/pull/32276)) ### [`v1.14.1`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.14.1) #### 1.14.1 (2023-10-09) ##### Bugs Fixed - Bug fixes for developer credentials ### [`v1.14.0`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-core_1.14.0) #### 1.14.0 (2021-05-13) ##### New Features - Added `azure.core.credentials.AzureNamedKeyCredential` credential [#​17548](https://togithub.com/Azure/azure-sdk-for-python/issues/17548). - Added `decompress` parameter for `stream_download` method. If it is set to `False`, will not do decompression upon the stream. [#​17920](https://togithub.com/Azure/azure-sdk-for-python/issues/17920) ### [`v1.13.0`](https://togithub.com/Azure/azure-sdk-for-python/releases/tag/azure-core_1.13.0) #### 1.13.0 (2021-04-02) Azure core requires Python 2.7 or Python 3.6+ since this release. ##### New Features - Added `azure.core.utils.parse_connection_string` function to parse connection strings across SDKs, with common validation and support for case insensitive keys. - Supported adding custom policies [#​16519](https://togithub.com/Azure/azure-sdk-for-python/issues/16519) - Added `~azure.core.tracing.Link` that should be used while passing `Links` to `AbstractSpan`. - `AbstractSpan` constructor can now take in additional keyword only args. ##### Bug fixes - Make NetworkTraceLoggingPolicy show the auth token in plain text. [#​14191](https://togithub.com/Azure/azure-sdk-for-python/issues/14191) - Fixed RetryPolicy overriding default connection timeout with an extreme value [#​17481](https://togithub.com/Azure/azure-sdk-for-python/issues/17481)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - "every weekday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 84.09%. Comparing base (86781f0) to head (5340c69).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #433 +/- ## ======================================= Coverage 84.09% 84.09% ======================================= Files 83 83 Lines 3547 3547 ======================================= Hits 2983 2983 Misses 564 564 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.