Fix validation of URL fields to allow missing user field,
per NWG RFC 3986 (:issue:2232). Thanks :user:ddennerline3 for reporting
and :user:deckar01 for the PR.
Other changes:
Backwards-incompatible: __version__, __parsed_version__, and __version_info__
attributes are deprecated (:issue:2227). Use feature detection or
importlib.metadata.version("marshmallow") instead.
3.20.2 (2024-01-09)
Bug fixes:
Fix Nested field type hint for lambda Schema types (:pr:2164).
Thanks :user:somethingnew2-0 for the PR.
Other changes:
Officially support Python 3.12 (:pr:2188).
Thanks :user:hugovk for the PR.
* Limit the number of name constraint checks that will be performed in
:mod:`X.509 path validation <cryptography.x509.verification>` to protect
against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.
.. _v42-0-4:
42.0.4 - 2024-02-20
Fixed a null-pointer-dereference and segfault that could occur when creating
a PKCS#12 bundle. Credit to Alexander-Programming for reporting the
issue. CVE-2024-26130
Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities
and SignatureAlgorithmIdentifier should now be correctly encoded according to the
definitions in :rfc:2633 :rfc:3370.
.. _v42-0-3:
42.0.3 - 2024-02-15
* Fixed an initialization issue that caused key loading failures for some
users.
.. _v42-0-2:
42.0.2 - 2024-01-30
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
Fixed an issue that prevented the use of Python buffer protocol objects in
sign and verify methods on asymmetric keys.
Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange,
X25519PrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange,
X448PrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange,
and DHPrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange.
api-change:eks: Added support for new AL2023 AMIs to the supported AMITypes.
api-change:lexv2-models: This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users.
api-change:migrationhuborchestrator: Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs.
api-change:quicksight: TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update
api-change:sagemaker: Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration.
api-change:securitylake: Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.
1.34.52
api-change:batch: This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs.
api-change:bedrock-agent-runtime: This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents
api-change:ce: This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity.
api-change:ec2: This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000.
api-change:iot: This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL.
api-change:wafv2: AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes.
1.34.51
api-change:amplifyuibuilder: We have added the ability to tag resources after they are created
1.34.50
api-change:apigateway: Documentation updates for Amazon API Gateway.
api-change:drs: Added volume status to DescribeSourceServer replicated volumes.
api-change:kafkaconnect: Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API.
api-change:rds: This release adds support for gp3 data volumes for Multi-AZ DB Clusters.
1.34.49
api-change:appsync: Documentation only updates for AppSync
api-change:qldb: Clarify possible values for KmsKeyArn and EncryptionDescription.
api-change:rds: Add pattern and length based validations for DBShardGroupIdentifier
api-change:rum: Doc-only update for new RUM metrics that were added
api-change:eks: [botocore] Added support for new AL2023 AMIs to the supported AMITypes.
api-change:lexv2-models: [botocore] This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users.
api-change:migrationhuborchestrator: [botocore] Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs.
api-change:quicksight: [botocore] TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update
api-change:sagemaker: [botocore] Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration.
api-change:securitylake: [botocore] Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.
1.34.52
api-change:batch: [botocore] This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs.
api-change:bedrock-agent-runtime: [botocore] This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents
api-change:ce: [botocore] This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity.
api-change:ec2: [botocore] This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000.
api-change:iot: [botocore] This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL.
api-change:wafv2: [botocore] AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes.
1.34.51
api-change:amplifyuibuilder: [botocore] We have added the ability to tag resources after they are created
1.34.50
api-change:apigateway: [botocore] Documentation updates for Amazon API Gateway.
api-change:drs: [botocore] Added volume status to DescribeSourceServer replicated volumes.
api-change:kafkaconnect: [botocore] Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API.
api-change:rds: [botocore] This release adds support for gp3 data volumes for Multi-AZ DB Clusters.
1.34.49
api-change:appsync: [botocore] Documentation only updates for AppSync
api-change:qldb: [botocore] Clarify possible values for KmsKeyArn and EncryptionDescription.
api-change:rds: [botocore] Add pattern and length based validations for DBShardGroupIdentifier
api-change:rum: [botocore] Doc-only update for new RUM metrics that were added
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the primary-deps group with 5 updates:
3.20.1
3.21.0
41.0.7
42.0.5
1.34.11
1.34.53
1.34.11
1.34.53
3.26.1
3.27.1
Updates
marshmallow
from 3.20.1 to 3.21.0Changelog
Sourced from marshmallow's changelog.
Commits
cd976d5
Bump version and update changelog853b144
URL User Info Validation (#2244)bf33daf
[pre-commit.ci] pre-commit autoupdate (#2242)13a12ad
Fix typoe140f7d
Deprecate version and related attributes (#2229)300f965
[pre-commit.ci] pre-commit autoupdatec282bd5
[pre-commit.ci] pre-commit autoupdate (#2239)af79a44
Bump actions/setup-python from 4 to 5 (#2236)6d4ebf3
Bump actions/upload-artifact from 3 to 4 (#2237)fe701be
Bump actions/download-artifact from 3 to 4 (#2238)Updates
cryptography
from 41.0.7 to 42.0.5Changelog
Sourced from cryptography's changelog.
... (truncated)
Commits
33833f0
Release 42.0.5 (#10470)4be53bf
Added a budget for NC checks to protect against DoS (#10467) (#10468)8e9de30
Bump pyo3 from 0.20.2 to 0.20.3 in /src/rust (#10462) (#10465)fe18470
Bump for 42.0.4 release (#10445)aaa2dd0
Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)7a4d012
Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...df314bb
backport actions m1 switch to 42.0.x (#10415)c49a7a5
changelog and version bump for 42.0.3 (#10396)396bcf6
fix provider loading take two (#10390) (#10395)0e0e46f
backport: initialize openssl's legacy provider in rust (#10323) (#10333)Updates
botocore
from 1.34.11 to 1.34.53Changelog
Sourced from botocore's changelog.
... (truncated)
Commits
eeb3362
Merge branch 'release-1.34.53'799f216
Bumping version to 1.34.5373acc04
Update endpoints model7afd549
Update to latest models5719553
Merge branch 'release-1.34.52' into developec6d662
Merge branch 'release-1.34.52'9aa9f07
Bumping version to 1.34.52c3e4bf6
Update to latest models1b66485
Merge branch 'release-1.34.51' into develop5863421
Merge branch 'release-1.34.51'Updates
boto3
from 1.34.11 to 1.34.53Changelog
Sourced from boto3's changelog.
... (truncated)
Commits
914c71b
Merge branch 'release-1.34.53'0fdef8b
Bumping version to 1.34.53f39ede7
Add changelog entries from botocore7d55662
Merge branch 'release-1.34.52' into develop78d211e
Merge branch 'release-1.34.52'f93792b
Bumping version to 1.34.52aae855b
Add changelog entries from botocoref707245
Merge branch 'release-1.34.51' into develop97c442a
Merge branch 'release-1.34.51'cc367ab
Bumping version to 1.34.51Updates
slack-sdk
from 3.26.1 to 3.27.1Release notes
Sourced from slack-sdk's releases.
Commits
e78bf56
version 3.27.1cd78ab4
Fix #1462 websocket_client-based SocketModeClient does not reconnect after a ...fe45e0b
Unpin moto, and support moto 5.0 changes60b02d6
version 3.27.074febaf
Fix #1458 internal error within aiohttp-based socket mode client (#1459)7e71b73
Fix #1450 slack_file in image block/element (#1452)00bb7cd
Add optional dependency (#1456)dc96f5f
Update Audit Logs API response typesf671c45
feat: add download badge in readme (#1449)03bd99e
version 3.26.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show