Changelog
### 3.1.1
```
-----------------------------------
**Security fixes**
* ``bleach.clean`` behavior parsing ``noscript`` tags did not match
browser behavior.
Calls to ``bleach.clean`` allowing ``noscript`` and one or more of
the raw text tags (``title``, ``textarea``, ``script``, ``style``,
``noembed``, ``noframes``, ``iframe``, and ``xmp``) were vulnerable
to a mutation XSS.
This security issue was confirmed in Bleach versions v2.1.4, v3.0.2,
and v3.1.0. Earlier versions are probably affected too.
Anyone using Bleach <=v3.1.0 is highly encouraged to upgrade.
https://bugzilla.mozilla.org/show_bug.cgi?id=1615315
**Backwards incompatible changes**
None
**Features**
None
**Bug fixes**
None
Bleach changes
==============
```
Links
- PyPI: https://pypi.org/project/bleach
- Changelog: https://pyup.io/changelogs/bleach/
- Repo: https://github.com/mozilla/bleach
- Docs: https://pythonhosted.org/bleach/
Changelog
### 1.11.1
```
Bug Fixes
* **github:** rename to github-actions ([9e65a059](9e65a059))
This fixes a regression introduced with v1.11.0, which may have prevented
usage of this library on Github Actions.
<a name="1.11.0"></a>
```
### 1.11.0
```
Fixes
* **github:** add service_number for github actions ([9f93bd8e](9f93bd8e))
This should fix support for parallel builds.
Compatibility
* Python 2.7 and 3.4 are now officially End-Of-Life'd. Consider them deprecated
from the perspective of this package -- we'll remove them in an upcoming
release (likely the first one which requires non-trivial work to continue
supporting them!).
<a name="1.10.0"></a>
```
### 1.10.0
```
Features
* support coverage>=5.0 (214) ([4a917402](4a917402))
<a name="1.9.2"></a>
```
### 1.9.2
```
Bug Fixes
* **github:** fixup incorrect API usage (209) ([c338cab4](c338cab4))
<a name="1.9.1"></a>
```
### 1.9.1
```
Compatibility
* this release marks Python 3.8 as officially supported. Earlier versions probably
supported Python 3.8 too, but now we're *sure*.
<a name="1.9.0"></a>
```
### 1.9.0
```
Features
* **support:** support Github Actions CI (207) ([817119c3](817119c3))
Bug Fixes
* **compatibility:** fixup coverage.__version__ comparisons (208) ([03a57a9a](03a57a9a))
<a name="1.8.2"></a>
```
Links
- PyPI: https://pypi.org/project/coveralls
- Changelog: https://pyup.io/changelogs/coveralls/
- Repo: http://github.com/coveralls-clients/coveralls-python
Update Flask-WTF from 0.14.2 to 0.14.3.
The bot wasn't able to find a changelog for this release. Got an idea?
Links
- PyPI: https://pypi.org/project/flask-wtf - Changelog: https://pyup.io/changelogs/flask-wtf/ - Repo: https://github.com/lepture/flask-wtf - Docs: https://pythonhosted.org/Flask-WTF/Update markdown from 3.1.1 to 3.2.1.
The bot wasn't able to find a changelog for this release. Got an idea?
Links
- PyPI: https://pypi.org/project/markdown - Repo: https://Python-Markdown.github.io/Update bleach from 3.1.0 to 3.1.1.
Changelog
### 3.1.1 ``` ----------------------------------- **Security fixes** * ``bleach.clean`` behavior parsing ``noscript`` tags did not match browser behavior. Calls to ``bleach.clean`` allowing ``noscript`` and one or more of the raw text tags (``title``, ``textarea``, ``script``, ``style``, ``noembed``, ``noframes``, ``iframe``, and ``xmp``) were vulnerable to a mutation XSS. This security issue was confirmed in Bleach versions v2.1.4, v3.0.2, and v3.1.0. Earlier versions are probably affected too. Anyone using Bleach <=v3.1.0 is highly encouraged to upgrade. https://bugzilla.mozilla.org/show_bug.cgi?id=1615315 **Backwards incompatible changes** None **Features** None **Bug fixes** None Bleach changes ============== ```Links
- PyPI: https://pypi.org/project/bleach - Changelog: https://pyup.io/changelogs/bleach/ - Repo: https://github.com/mozilla/bleach - Docs: https://pythonhosted.org/bleach/Update coveralls from 1.8.2 to 1.11.1.
Changelog
### 1.11.1 ``` Bug Fixes * **github:** rename to github-actions ([9e65a059](9e65a059)) This fixes a regression introduced with v1.11.0, which may have prevented usage of this library on Github Actions. <a name="1.11.0"></a> ``` ### 1.11.0 ``` Fixes * **github:** add service_number for github actions ([9f93bd8e](9f93bd8e)) This should fix support for parallel builds. Compatibility * Python 2.7 and 3.4 are now officially End-Of-Life'd. Consider them deprecated from the perspective of this package -- we'll remove them in an upcoming release (likely the first one which requires non-trivial work to continue supporting them!). <a name="1.10.0"></a> ``` ### 1.10.0 ``` Features * support coverage>=5.0 (214) ([4a917402](4a917402)) <a name="1.9.2"></a> ``` ### 1.9.2 ``` Bug Fixes * **github:** fixup incorrect API usage (209) ([c338cab4](c338cab4)) <a name="1.9.1"></a> ``` ### 1.9.1 ``` Compatibility * this release marks Python 3.8 as officially supported. Earlier versions probably supported Python 3.8 too, but now we're *sure*. <a name="1.9.0"></a> ``` ### 1.9.0 ``` Features * **support:** support Github Actions CI (207) ([817119c3](817119c3)) Bug Fixes * **compatibility:** fixup coverage.__version__ comparisons (208) ([03a57a9a](03a57a9a)) <a name="1.8.2"></a> ```Links
- PyPI: https://pypi.org/project/coveralls - Changelog: https://pyup.io/changelogs/coveralls/ - Repo: http://github.com/coveralls-clients/coveralls-python