search

TeamPGM / PagerMaid-Pyro

Advanced Multi-Featured Telegram UserBot by pyrogram.
GNU Affero General Public License v3.0
620 stars 73 forks source link

⬆️ Update fastapi requirement from ~=0.89.1 to ~=0.92.0 #52

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Updates the requirements on fastapi to permit the latest version.

Release notes

Sourced from fastapi's releases.

0.92.0

🚨 This is a security fix. Please upgrade as soon as possible.

Upgrades

  • ⬆️ Upgrade Starlette to 0.25.0. PR #5996 by @​tiangolo.
    • This solves a vulnerability that could allow denial of service attacks by using many small multipart fields/files (parts), consuming high CPU and memory.
    • Only applications using forms (e.g. file uploads) could be affected.
    • For most cases, upgrading won't have any breaking changes.
Commits
  • 6879082 🔖 Release version 0.92.0
  • 52ca6cb 📝 Update release notes
  • 9e283ef 📝 Update release notes
  • 75e7e9e ⬆️ Upgrade Starlette to 0.25.0 (#5996)
  • 2ca77f9 🔖 Release version 0.91.0
  • 3c05189 📝 Update release notes
  • a04acf6 📝 Update release notes
  • d566c6c ⬆️ Upgrade Starlette version to 0.24.0 and refactor internals for compatibi...
  • 6e94ec2 🔖 Release version 0.90.1
  • e85c109 📝 Update release notes
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Looks like fastapi is up-to-date now, so this is no longer needed.