lepture/authlib (Authlib)
### [`v1.3.2`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.2): Version 1.3.2
[Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.3.1...v1.3.2)
- Prevent ever-growing session size for OAuth clients.
- Revert `quote` client id and secret.
- `unquote` basic auth header for authorization server.
### [`v1.3.1`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.1): Version 1.3.1
[Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.3.0...v1.3.1)
Prevent `OctKey` to import ssh and PEM strings.
### [`v1.3.0`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.0): Version 1.3.0
[Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.2.1...v1.3.0)
**Bug fixes**
- Restore AuthorizationServer.create_authorization_response behavior, via [#558](https://redirect.github.com/lepture/authlib/issues/558) by [@TurnrDev](https://redirect.github.com/TurnrDev)
- Include leeway in validate_iat() for JWT, via [#565](https://redirect.github.com/lepture/authlib/issues/565) by [@dhallam](https://redirect.github.com/dhallam)
- Fix encode_client_secret_basic, via [#594](https://redirect.github.com/lepture/authlib/issues/594) by [@Prilkop](https://redirect.github.com/Prilkop)
- Use single key in JWK if JWS does not specify kid, via [#596](https://redirect.github.com/lepture/authlib/issues/596) by [@dklimpel](https://redirect.github.com/dklimpel)
- Fix error when RFC9068 JWS has no scope field, via [#598](https://redirect.github.com/lepture/authlib/issues/598) by [@tanguilp](https://redirect.github.com/tanguilp)
- Get werkzeug version using importlib, via [#591](https://redirect.github.com/lepture/authlib/issues/591) by [@Sparrow0hawk](https://redirect.github.com/Sparrow0hawk)
**Breaking changes**
- RFC9068 implementation, via [#586](https://redirect.github.com/lepture/authlib/issues/586) by [@azmeuk](https://redirect.github.com/azmeuk).
### [`v1.2.1`](https://redirect.github.com/lepture/authlib/releases/tag/v1.2.1): Version 1.2.1
[Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.2.0...v1.2.1)
- Apply headers in `ClientSecretJWT.sign` method, via [#552](https://redirect.github.com/lepture/authlib/issues/552)
- Allow falsy but non-None grant uri params, via [#544](https://redirect.github.com/lepture/authlib/issues/544)
- Fixed `authorize_redirect` for Starlette v0.26.0, via [#533](https://redirect.github.com/lepture/authlib/issues/533)
- Removed `has_client_secret` method and documentation, via [#513](https://redirect.github.com/lepture/authlib/issues/513)
- Removed `request_invalid` and `token_revoked` remaining occurences
and documentation. [#514](https://redirect.github.com/lepture/authlib/issues/514)
- Fixed RFC7591 `grant_types` and `response_types` default values, via [#509](https://redirect.github.com/lepture/authlib/issues/509)
- Add support for python 3.12, via [#590](https://redirect.github.com/lepture/authlib/issues/590)
### [`v1.2.0`](https://redirect.github.com/lepture/authlib/releases/tag/v1.2.0): Version 1.2.0
[Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.1.0...v1.2.0)
- Not passing `request.body` to `ResourceProtector`, [#485](https://redirect.github.com/lepture/authlib/issues/485).
- Use `flask.g` instead of `_app_ctx_stack`, [#482](https://redirect.github.com/lepture/authlib/issues/482).
- Add `headers` parameter back to `ClientSecretJWT`, [#457](https://redirect.github.com/lepture/authlib/issues/457).
- Always passing `realm` parameter in OAuth 1 clients, [#339](https://redirect.github.com/lepture/authlib/issues/339).
- Implemented RFC7592 Dynamic Client Registration Management Protocol, [#505](https://redirect.github.com/lepture/authlib/issues/505)\`
- Add `default_timeout` for requests `OAuth2Session` and `AssertionSession`.
- Deprecate `jwk.loads` and `jwk.dumps`
pgjones/hypercorn (Hypercorn)
### [`v0.17.3`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0173-2024-05-28)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.2...0.17.3)
- Restore set TCP_NODELAY on TCP sockets
- Support uvloop >= 0.18 and the loop_factory argument
- Bugfix ensure ExceptionGroup lifespan failures crash the server.
### [`v0.17.2`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0172-2024-05-27)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.1...0.17.2)
- Bugfix pass the correct quic connection to the H3 Protocol.
### [`v0.17.1`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0171-2024-05-27)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.0...0.17.1)
- Bugfix revert set TCP_NODELAY on sockets.
### [`v0.17.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0170-2024-05-27)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.16.0...0.17.0)
- Set TCP_NODELAY on sockets.
- Support sending trailing headers on h2/h3.
- Add support for lifespan state.
- Allow sending of the response before body data arrives.
- Bugfix properly set host header to ascii string in
ProxyFixMiddleware.
- Bugfix encode headers using latin-1.
- Bugfix don't double-access log if the response was sent.
- Bugfix a statsd logging bug.
- Bugfix handle already-closed on StreamEnded.
- Bugfix send a 400 response if data is received before the websocket
is accepted.
- Bugfix ensure only a single QUIC timer task per connection.
- Bugfix ensure responses are sent with empty bodies for WSGI.
### [`v0.16.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0160-2024-01-01)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.15.0...0.16.0)
- Add a max keep alive requests configuration option, this mitigates
the HTTP/2 rapid reset attack.
- Return subprocess exit code if non-zero.
- Add ProxyFix middleware to make it easier to run Hypercorn behind a
proxy.
- Support restarting workers after max requests to make it easier to
manage memory leaks in apps.
- Bugfix ensure the idle task is stopped on error.
- Bugfix revert autoreload error because reausing old sockets.
- Bugfix send the hinted error from h11 on RemoteProtocolErrors.
- Bugfix handle asyncio.CancelledError when socket is closed without
flushing.
- Bugfix improve WSGI compliance by closing iterators, only sending
headers on first response byte, erroring if `start_response` is
not called, and switching wsgi.errors to stdout.
- Don't error on LocalProtoclErrors for ws streams to better cope with
race conditions.
### [`v0.15.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0150-2023-10-29)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.14.4...0.15.0)
- Improve the NoAppError to help diagnose why the app has not been
found.
- Log cancelled requests as well as successful to aid diagnositics of
failures.
- Use more modern asyncio apis. This will hopefully fix reported
memory leak issues.
- Bugfix only load the application in the main process if the reloader
is being used.
- Bugfix Autoreload error because reausing old sockets.
- Bugfix scope client usage for sock binding.
- Bugfix disable multiprocessing if number of workers is 0 to support
systems that don't support multiprocessing.
### [`v0.14.4`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0144-2023-07-08)
[Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.14.3...0.14.4)
- Bugfix Use tomllib/tomli for .toml support replacing the
unmaintained toml library.
- Bugfix server hanging on startup failure.
- Bugfix close websocket with 1011 on internal error (1006 is a
client-only code).
- Bugfix support trio > 0.22 utilising exception groups (note trio <=
0.22 is not supported).
- Bugfix except ConnectionAbortedError which can be raised on Windows
machines.
- Bugfix ensure that closed is sent on reading end.
- Bugfix handle read_timeout exception on trio.
- Support and test against Python 3.11.
- Add explanation of PicklingErrors.
- Add config option to pass raw h11 headers.
pallets/jinja (Jinja2)
### [`v3.1.4`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-314)
[Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.3...3.1.4)
Released 2024-05-05
- The `xmlattr` filter does not allow keys with `/` solidus, `>`
greater-than sign, or `=` equals sign, in addition to disallowing spaces.
Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:`h75v-3vvj-5mfj`
### [`v3.1.3`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-313)
[Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.2...3.1.3)
Released 2024-01-10
- Fix compiler error when checking if required blocks in parent templates are
empty. :pr:`1858`
- `xmlattr` filter does not allow keys with spaces. :ghsa:`h5c8-rqwp-cp95`
- Make error messages stemming from invalid nesting of `{% trans %}` blocks
more helpful. :pr:`1918`
Python-Markdown/markdown (Markdown)
### [`v3.7`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.7)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.6...3.7)
##### Changed
##### Refactor `abbr` Extension
A new `AbbrTreeprocessor` has been introduced, which replaces the now deprecated
`AbbrInlineProcessor`. Abbreviation processing now happens after Attribute Lists,
avoiding a conflict between the two extensions ([#1460](https://redirect.github.com/Python-Markdown/markdown/issues/1460)).
The `AbbrPreprocessor` class has been renamed to `AbbrBlockprocessor`, which
better reflects what it is. `AbbrPreprocessor` has been deprecated.
A call to `Markdown.reset()` now clears all previously defined abbreviations.
Abbreviations are now sorted by length before executing `AbbrTreeprocessor`
to ensure that multi-word abbreviations are implemented even if an abbreviation
exists for one of those component words. ([#1465](https://redirect.github.com/Python-Markdown/markdown/issues/1465))
Abbreviations without a definition are now ignored. This avoids applying
abbr tags to text without a title value.
Added an optional `glossary` configuration option to the abbreviations extension.
This provides a simple and efficient way to apply a dictionary of abbreviations
to every page.
Abbreviations can now be disabled by setting their definition to `""` or `''`.
This can be useful when using the `glossary` option.
##### Fixed
- Fixed links to source code on GitHub from the documentation ([#1453](https://redirect.github.com/Python-Markdown/markdown/issues/1453)).
### [`v3.6`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.6)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5.2...3.6)
##### Changed
##### Refactor TOC Sanitation
- All postprocessors are now run on heading content.
- Footnote references are now stripped from heading content. Fixes [#660](https://redirect.github.com/Python-Markdown/markdown/issues/660).
- A more robust `striptags` is provided to convert headings to plain text.
Unlike, the `markupsafe` implementation, HTML entities are not unescaped.
- The plain text `name`, rich `html`, and unescaped raw `data-toc-label` are
saved to `toc_tokens`, allowing users to access the full rich text content of
the headings directly from `toc_tokens`.
- The value of `data-toc-label` is sanitized separate from heading content
before being written to `name`. This fixes a bug which allowed markup through
in certain circumstances. To access the raw unsanitized data, retrieve the
value from `token['data-toc-label']` directly.
- An `html.unescape` call is made just prior to calling `slugify` so that
`slugify` only operates on Unicode characters. Note that `html.unescape` is
not run on `name`, `html`, or `data-toc-label`.
- The functions `get_name` and `stashedHTML2text` defined in the `toc` extension
are both **deprecated**. Instead, third party extensions should use some
combination of the new functions `run_postprocessors`, `render_inner_html` and
`striptags`.
##### Fixed
- Include `scripts/*.py` in the generated source tarballs ([#1430](https://redirect.github.com/Python-Markdown/markdown/issues/1430)).
- Ensure lines after heading in loose list are properly detabbed ([#1443](https://redirect.github.com/Python-Markdown/markdown/issues/1443)).
- Give smarty tree processor higher priority than toc ([#1440](https://redirect.github.com/Python-Markdown/markdown/issues/1440)).
- Permit carets (`^`) and square brackets (`]`) but explicitly exclude
backslashes (`\`) from abbreviations ([#1444](https://redirect.github.com/Python-Markdown/markdown/issues/1444)).
- In attribute lists (`attr_list`, `fenced_code`), quoted attribute values are
now allowed to contain curly braces (`}`) ([#1414](https://redirect.github.com/Python-Markdown/markdown/issues/1414)).
### [`v3.5.2`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.5.2)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5.1...3.5.2)
##### Fixed
- Fix type annotations for `convertFile` - it accepts only bytes-based buffers.
Also remove legacy checks from Python 2 ([#1400](https://redirect.github.com/Python-Markdown/markdown/issues/1400))
- Remove legacy import needed only in Python 2 ([#1403](https://redirect.github.com/Python-Markdown/markdown/issues/1403))
- Fix typo that left the attribute `AdmonitionProcessor.content_indent` unset
([#1404](https://redirect.github.com/Python-Markdown/markdown/issues/1404))
- Fix edge-case crash in `InlineProcessor` with `AtomicString` ([#1406](https://redirect.github.com/Python-Markdown/markdown/issues/1406)).
- Fix edge-case crash in `codehilite` with an empty `code` tag ([#1405](https://redirect.github.com/Python-Markdown/markdown/issues/1405)).
- Improve and expand type annotations in the code base ([#1401](https://redirect.github.com/Python-Markdown/markdown/issues/1401)).
- Fix handling of bogus comments ([#1425](https://redirect.github.com/Python-Markdown/markdown/issues/1425)).
### [`v3.5.1`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.5.1)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5...3.5.1)
##### Fixed
- Fix a performance problem with HTML extraction where large HTML input could
trigger quadratic line counting behavior ([#1392](https://redirect.github.com/Python-Markdown/markdown/issues/1392)).
- Improve and expand type annotations in the code base ([#1394](https://redirect.github.com/Python-Markdown/markdown/issues/1394)).
### [`v3.5`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.4...3.5)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.4...3.5)
### [`v3.4.4`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.3...3.4.4)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.3...3.4.4)
### [`v3.4.3`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.2...3.4.3)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.2...3.4.3)
### [`v3.4.2`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.1...3.4.2)
[Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.1...3.4.2)
actions/checkout (actions/checkout)
### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4)
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739)
- Bump actions/checkout from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697)
- Check out other refs/\* by commit by [@orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774)
- Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776)
Tinche/aiofiles (aiofiles)
### [`v24.1.0`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v24.1.0): 24.1.0
[Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.2.1...v24.1.0)
- Import `os.link` conditionally to fix importing on android.
[#175](https://redirect.github.com/Tinche/aiofiles/issues/175)
- Remove spurious items from `aiofiles.os.__all__` when running on Windows.
- Switch to more modern async idioms: Remove types.coroutine and make AiofilesContextManager an awaitable instead a coroutine.
- Add `aiofiles.os.path.abspath` and `aiofiles.os.getcwd`.
[#174](https://redirect.github.com/Tinche/aiofiles/issues/181)
- *aiofiles* is now tested on Python 3.13 too.
[#184](https://redirect.github.com/Tinche/aiofiles/pull/184)
- Dropped Python 3.7 support. If you require it, use version 23.2.1.
### [`v23.2.1`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v23.2.1): 23.2.1
[Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.2.0...v23.2.1)
- Import `os.statvfs` conditionally to fix importing on non-UNIX systems.
[#171](https://redirect.github.com/Tinche/aiofiles/issues/171) [#172](https://redirect.github.com/Tinche/aiofiles/pull/172)
- aiofiles is now also tested on Windows.
### [`v23.2.0`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v23.2.0): 23.2.0
[Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.1.0...v23.2.0)
### 23.2.0
- aiofiles is now tested on Python 3.12 too.
[#166](https://redirect.github.com/Tinche/aiofiles/issues/166) [#168](https://redirect.github.com/Tinche/aiofiles/pull/168)
- On Python 3.12, `aiofiles.tempfile.NamedTemporaryFile` now accepts a `delete_on_close` argument, just like the stdlib version.
- On Python 3.12, `aiofiles.tempfile.NamedTemporaryFile` no longer exposes a `delete` attribute, just like the stdlib version.
- Added `aiofiles.os.statvfs` and `aiofiles.os.path.ismount`.
[#162](https://redirect.github.com/Tinche/aiofiles/pull/162)
- Use [PDM](https://pdm.fming.dev/latest/) instead of Poetry.
[#169](https://redirect.github.com/Tinche/aiofiles/pull/169)
### [`v23.1.0`](https://redirect.github.com/Tinche/aiofiles/compare/v22.1.0...v23.1.0)
[Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v22.1.0...v23.1.0)
aio-libs/aiohttp (aiohttp)
### [`v3.10.5`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3105-2024-08-19)
[Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.4...v3.10.5)
\=========================
## Bug fixes
- Fixed :meth:`aiohttp.ClientResponse.json()` not setting `status` when :exc:`aiohttp.ContentTypeError` is raised -- by :user:`bdraco`.
*Related issues and pull requests on GitHub:*
:issue:`8742`.
## Miscellaneous internal changes
- Improved performance of the WebSocket reader -- by :user:`bdraco`.
*Related issues and pull requests on GitHub:*
:issue:`8736`, :issue:`8747`.
***
### [`v3.10.4`](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.3...v3.10.4)
[Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.3...v3.10.4)
### [`v3.10.3`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3103-2024-08-10)
[Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.2...v3.10.3)
\========================
## Bug fixes
- Fixed multipart reading when stream buffer splits the boundary over several read() calls -- by :user:`Dreamsorcerer`.
*Related issues and pull requests on GitHub:*
:issue:`8653`.
- Fixed :py:class:`aiohttp.TCPConnector` doing blocking I/O in the event loop to create the `SSLContext` -- by :user:`bdraco`.
The blocking I/O would only happen once per verify mode. However, it could cause the event loop to block for a long time if the `SSLContext` creation is slow, which is more likely during startup when the disk cache is not yet present.
*Related issues and pull requests on GitHub:*
:issue:`8672`.
## Miscellaneous internal changes
- Improved performance of :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` when there is no timeout. -- by :user:`bdraco`.
The timeout context manager is now avoided when there is no timeout as it accounted for up to 50% of the time spent in the :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` methods.
*Related issues and pull requests on GitHub:*
:issue:`8660`.
- Improved performance of starting request handlers with Python 3.12+ -- by :user:`bdraco`.
*Related issues and pull requests on GitHub:*
:issue:`8661`.
- Improved performance of HTTP keep-alive checks -- by :user:`bdraco`.
Previously, when processing a request for a keep-alive connection, the keep-alive check would happen every second; the check is now rescheduled if it fires too early instead.
*Related issues and pull requests on GitHub:*
:issue:`8662`.
- Improved performance of generating random WebSocket mask -- by :user:`bdraco`.
*Related issues and pull requests on GitHub:*
:issue:`8667`.
***
### [`v3.10.2`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3102-2024-08-08)
[Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.1...v3.10.2)
\===================
## Bug fixes
- Fixed server checks for circular symbolic links to be compatible with Python 3.13 -- by :user:`steverep`.
*Related issues and pull requests on GitHub:*
:issue:`8565`.
- Fixed request body not being read when ignoring an Upgrade request -- by :user:`Dreamsorcerer`.
*Related issues and pull requests on GitHub:*
:issue:`8597`.
- Fixed an edge case where shutdown would wait for timeout when the handler was already completed -- by :user:`Dreamsorcerer`.
*Related issues and pull requests on GitHub:*
:issue:`8611`.
- Fixed connecting to `npipe://`, `tcp://`, and `unix://` urls -- by :user:`bdraco`.
*Related issues and pull requests on GitHub:*
:issue:`8632`.
- Fixed WebSocket ping tasks being prematurely garbage collected -- by :user:`bdraco`.
There was a small risk that WebSocket ping tasks would be prematurely garbage collected because the event loop only holds a weak referen
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
==1.1.0
->==1.3.2
==0.14.3
->==0.17.3
==3.1.2
->==3.1.4
==3.4.1
->==3.7
==1.4.43
->==2.0.34
==2.2.2
->==3.0.4
v3
->v4
==22.1.0
->==24.1.0
==3.8.3
->==3.10.5
==1.8.1
->==1.13.2
==3.5.2
->==3.8.1
==1.7.7
->==2.3.1
==4.0.1
->==4.2.0
==4.11.1
->==4.12.3
==22.10.0
->==24.8.0
==5.0.1
->==6.1.0
==6.5.0
->==7.6.1
==1.3.0
->==2.2.0
==1.10.0
->==2.24.1
==0.86.0
->==0.114.1
==0.9.0
->==1.0.0
==3.8.0
->==3.16.0
==5.0.4
->==7.1.1
==20.1.0
->==23.0.0
11.5.0
->11.10.0
==0.23.0
->==0.27.2
==5.10.1
->==5.13.2
==2.1.2
->==2.2.0
==4.9.1
->==5.3.0
==0.5.2
->==0.8.1
==2.1.1
->==2.2.4
==3.8.1
->==3.10.7
==0.5.6
->==0.5.7
==1.0.5
->==1.1.1
==5.9.1
->==7.0.0
==4.21.9
->==5.28.0
==1.10.1
->==1.15.1
==7.2.0
->==8.3.3
==0.20.1
->==0.24.0
==4.0.0
->==5.0.0
==3.3
->==3.4
==3.0.2
->==3.6.1
==0.0.5
->==0.0.9
==4.3.4
->==5.0.8
==2.28.1
->==2.32.3
==1.10.1
->==2.14.0
==0.19.0
->==0.30.6
Release Notes
lepture/authlib (Authlib)
### [`v1.3.2`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.2): Version 1.3.2 [Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.3.1...v1.3.2) - Prevent ever-growing session size for OAuth clients. - Revert `quote` client id and secret. - `unquote` basic auth header for authorization server. ### [`v1.3.1`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.1): Version 1.3.1 [Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.3.0...v1.3.1) Prevent `OctKey` to import ssh and PEM strings. ### [`v1.3.0`](https://redirect.github.com/lepture/authlib/releases/tag/v1.3.0): Version 1.3.0 [Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.2.1...v1.3.0) **Bug fixes** - Restore AuthorizationServer.create_authorization_response behavior, via [#558](https://redirect.github.com/lepture/authlib/issues/558) by [@TurnrDev](https://redirect.github.com/TurnrDev) - Include leeway in validate_iat() for JWT, via [#565](https://redirect.github.com/lepture/authlib/issues/565) by [@dhallam](https://redirect.github.com/dhallam) - Fix encode_client_secret_basic, via [#594](https://redirect.github.com/lepture/authlib/issues/594) by [@Prilkop](https://redirect.github.com/Prilkop) - Use single key in JWK if JWS does not specify kid, via [#596](https://redirect.github.com/lepture/authlib/issues/596) by [@dklimpel](https://redirect.github.com/dklimpel) - Fix error when RFC9068 JWS has no scope field, via [#598](https://redirect.github.com/lepture/authlib/issues/598) by [@tanguilp](https://redirect.github.com/tanguilp) - Get werkzeug version using importlib, via [#591](https://redirect.github.com/lepture/authlib/issues/591) by [@Sparrow0hawk](https://redirect.github.com/Sparrow0hawk) **Breaking changes** - RFC9068 implementation, via [#586](https://redirect.github.com/lepture/authlib/issues/586) by [@azmeuk](https://redirect.github.com/azmeuk). ### [`v1.2.1`](https://redirect.github.com/lepture/authlib/releases/tag/v1.2.1): Version 1.2.1 [Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.2.0...v1.2.1) - Apply headers in `ClientSecretJWT.sign` method, via [#552](https://redirect.github.com/lepture/authlib/issues/552) - Allow falsy but non-None grant uri params, via [#544](https://redirect.github.com/lepture/authlib/issues/544) - Fixed `authorize_redirect` for Starlette v0.26.0, via [#533](https://redirect.github.com/lepture/authlib/issues/533) - Removed `has_client_secret` method and documentation, via [#513](https://redirect.github.com/lepture/authlib/issues/513) - Removed `request_invalid` and `token_revoked` remaining occurences and documentation. [#514](https://redirect.github.com/lepture/authlib/issues/514) - Fixed RFC7591 `grant_types` and `response_types` default values, via [#509](https://redirect.github.com/lepture/authlib/issues/509) - Add support for python 3.12, via [#590](https://redirect.github.com/lepture/authlib/issues/590) ### [`v1.2.0`](https://redirect.github.com/lepture/authlib/releases/tag/v1.2.0): Version 1.2.0 [Compare Source](https://redirect.github.com/lepture/authlib/compare/v1.1.0...v1.2.0) - Not passing `request.body` to `ResourceProtector`, [#485](https://redirect.github.com/lepture/authlib/issues/485). - Use `flask.g` instead of `_app_ctx_stack`, [#482](https://redirect.github.com/lepture/authlib/issues/482). - Add `headers` parameter back to `ClientSecretJWT`, [#457](https://redirect.github.com/lepture/authlib/issues/457). - Always passing `realm` parameter in OAuth 1 clients, [#339](https://redirect.github.com/lepture/authlib/issues/339). - Implemented RFC7592 Dynamic Client Registration Management Protocol, [#505](https://redirect.github.com/lepture/authlib/issues/505)\` - Add `default_timeout` for requests `OAuth2Session` and `AssertionSession`. - Deprecate `jwk.loads` and `jwk.dumps`pgjones/hypercorn (Hypercorn)
### [`v0.17.3`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0173-2024-05-28) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.2...0.17.3) - Restore set TCP_NODELAY on TCP sockets - Support uvloop >= 0.18 and the loop_factory argument - Bugfix ensure ExceptionGroup lifespan failures crash the server. ### [`v0.17.2`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0172-2024-05-27) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.1...0.17.2) - Bugfix pass the correct quic connection to the H3 Protocol. ### [`v0.17.1`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0171-2024-05-27) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.17.0...0.17.1) - Bugfix revert set TCP_NODELAY on sockets. ### [`v0.17.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0170-2024-05-27) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.16.0...0.17.0) - Set TCP_NODELAY on sockets. - Support sending trailing headers on h2/h3. - Add support for lifespan state. - Allow sending of the response before body data arrives. - Bugfix properly set host header to ascii string in ProxyFixMiddleware. - Bugfix encode headers using latin-1. - Bugfix don't double-access log if the response was sent. - Bugfix a statsd logging bug. - Bugfix handle already-closed on StreamEnded. - Bugfix send a 400 response if data is received before the websocket is accepted. - Bugfix ensure only a single QUIC timer task per connection. - Bugfix ensure responses are sent with empty bodies for WSGI. ### [`v0.16.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0160-2024-01-01) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.15.0...0.16.0) - Add a max keep alive requests configuration option, this mitigates the HTTP/2 rapid reset attack. - Return subprocess exit code if non-zero. - Add ProxyFix middleware to make it easier to run Hypercorn behind a proxy. - Support restarting workers after max requests to make it easier to manage memory leaks in apps. - Bugfix ensure the idle task is stopped on error. - Bugfix revert autoreload error because reausing old sockets. - Bugfix send the hinted error from h11 on RemoteProtocolErrors. - Bugfix handle asyncio.CancelledError when socket is closed without flushing. - Bugfix improve WSGI compliance by closing iterators, only sending headers on first response byte, erroring if `start_response` is not called, and switching wsgi.errors to stdout. - Don't error on LocalProtoclErrors for ws streams to better cope with race conditions. ### [`v0.15.0`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0150-2023-10-29) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.14.4...0.15.0) - Improve the NoAppError to help diagnose why the app has not been found. - Log cancelled requests as well as successful to aid diagnositics of failures. - Use more modern asyncio apis. This will hopefully fix reported memory leak issues. - Bugfix only load the application in the main process if the reloader is being used. - Bugfix Autoreload error because reausing old sockets. - Bugfix scope client usage for sock binding. - Bugfix disable multiprocessing if number of workers is 0 to support systems that don't support multiprocessing. ### [`v0.14.4`](https://redirect.github.com/pgjones/hypercorn/blob/HEAD/CHANGELOG.rst#0144-2023-07-08) [Compare Source](https://redirect.github.com/pgjones/hypercorn/compare/0.14.3...0.14.4) - Bugfix Use tomllib/tomli for .toml support replacing the unmaintained toml library. - Bugfix server hanging on startup failure. - Bugfix close websocket with 1011 on internal error (1006 is a client-only code). - Bugfix support trio > 0.22 utilising exception groups (note trio <= 0.22 is not supported). - Bugfix except ConnectionAbortedError which can be raised on Windows machines. - Bugfix ensure that closed is sent on reading end. - Bugfix handle read_timeout exception on trio. - Support and test against Python 3.11. - Add explanation of PicklingErrors. - Add config option to pass raw h11 headers.pallets/jinja (Jinja2)
### [`v3.1.4`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-314) [Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.3...3.1.4) Released 2024-05-05 - The `xmlattr` filter does not allow keys with `/` solidus, `>` greater-than sign, or `=` equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. :ghsa:`h75v-3vvj-5mfj` ### [`v3.1.3`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-313) [Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.2...3.1.3) Released 2024-01-10 - Fix compiler error when checking if required blocks in parent templates are empty. :pr:`1858` - `xmlattr` filter does not allow keys with spaces. :ghsa:`h5c8-rqwp-cp95` - Make error messages stemming from invalid nesting of `{% trans %}` blocks more helpful. :pr:`1918`Python-Markdown/markdown (Markdown)
### [`v3.7`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.7) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.6...3.7) ##### Changed ##### Refactor `abbr` Extension A new `AbbrTreeprocessor` has been introduced, which replaces the now deprecated `AbbrInlineProcessor`. Abbreviation processing now happens after Attribute Lists, avoiding a conflict between the two extensions ([#1460](https://redirect.github.com/Python-Markdown/markdown/issues/1460)). The `AbbrPreprocessor` class has been renamed to `AbbrBlockprocessor`, which better reflects what it is. `AbbrPreprocessor` has been deprecated. A call to `Markdown.reset()` now clears all previously defined abbreviations. Abbreviations are now sorted by length before executing `AbbrTreeprocessor` to ensure that multi-word abbreviations are implemented even if an abbreviation exists for one of those component words. ([#1465](https://redirect.github.com/Python-Markdown/markdown/issues/1465)) Abbreviations without a definition are now ignored. This avoids applying abbr tags to text without a title value. Added an optional `glossary` configuration option to the abbreviations extension. This provides a simple and efficient way to apply a dictionary of abbreviations to every page. Abbreviations can now be disabled by setting their definition to `""` or `''`. This can be useful when using the `glossary` option. ##### Fixed - Fixed links to source code on GitHub from the documentation ([#1453](https://redirect.github.com/Python-Markdown/markdown/issues/1453)). ### [`v3.6`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.6) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5.2...3.6) ##### Changed ##### Refactor TOC Sanitation - All postprocessors are now run on heading content. - Footnote references are now stripped from heading content. Fixes [#660](https://redirect.github.com/Python-Markdown/markdown/issues/660). - A more robust `striptags` is provided to convert headings to plain text. Unlike, the `markupsafe` implementation, HTML entities are not unescaped. - The plain text `name`, rich `html`, and unescaped raw `data-toc-label` are saved to `toc_tokens`, allowing users to access the full rich text content of the headings directly from `toc_tokens`. - The value of `data-toc-label` is sanitized separate from heading content before being written to `name`. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from `token['data-toc-label']` directly. - An `html.unescape` call is made just prior to calling `slugify` so that `slugify` only operates on Unicode characters. Note that `html.unescape` is not run on `name`, `html`, or `data-toc-label`. - The functions `get_name` and `stashedHTML2text` defined in the `toc` extension are both **deprecated**. Instead, third party extensions should use some combination of the new functions `run_postprocessors`, `render_inner_html` and `striptags`. ##### Fixed - Include `scripts/*.py` in the generated source tarballs ([#1430](https://redirect.github.com/Python-Markdown/markdown/issues/1430)). - Ensure lines after heading in loose list are properly detabbed ([#1443](https://redirect.github.com/Python-Markdown/markdown/issues/1443)). - Give smarty tree processor higher priority than toc ([#1440](https://redirect.github.com/Python-Markdown/markdown/issues/1440)). - Permit carets (`^`) and square brackets (`]`) but explicitly exclude backslashes (`\`) from abbreviations ([#1444](https://redirect.github.com/Python-Markdown/markdown/issues/1444)). - In attribute lists (`attr_list`, `fenced_code`), quoted attribute values are now allowed to contain curly braces (`}`) ([#1414](https://redirect.github.com/Python-Markdown/markdown/issues/1414)). ### [`v3.5.2`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.5.2) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5.1...3.5.2) ##### Fixed - Fix type annotations for `convertFile` - it accepts only bytes-based buffers. Also remove legacy checks from Python 2 ([#1400](https://redirect.github.com/Python-Markdown/markdown/issues/1400)) - Remove legacy import needed only in Python 2 ([#1403](https://redirect.github.com/Python-Markdown/markdown/issues/1403)) - Fix typo that left the attribute `AdmonitionProcessor.content_indent` unset ([#1404](https://redirect.github.com/Python-Markdown/markdown/issues/1404)) - Fix edge-case crash in `InlineProcessor` with `AtomicString` ([#1406](https://redirect.github.com/Python-Markdown/markdown/issues/1406)). - Fix edge-case crash in `codehilite` with an empty `code` tag ([#1405](https://redirect.github.com/Python-Markdown/markdown/issues/1405)). - Improve and expand type annotations in the code base ([#1401](https://redirect.github.com/Python-Markdown/markdown/issues/1401)). - Fix handling of bogus comments ([#1425](https://redirect.github.com/Python-Markdown/markdown/issues/1425)). ### [`v3.5.1`](https://redirect.github.com/Python-Markdown/markdown/releases/tag/3.5.1) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.5...3.5.1) ##### Fixed - Fix a performance problem with HTML extraction where large HTML input could trigger quadratic line counting behavior ([#1392](https://redirect.github.com/Python-Markdown/markdown/issues/1392)). - Improve and expand type annotations in the code base ([#1394](https://redirect.github.com/Python-Markdown/markdown/issues/1394)). ### [`v3.5`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.4...3.5) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.4...3.5) ### [`v3.4.4`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.3...3.4.4) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.3...3.4.4) ### [`v3.4.3`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.2...3.4.3) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.2...3.4.3) ### [`v3.4.2`](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.1...3.4.2) [Compare Source](https://redirect.github.com/Python-Markdown/markdown/compare/3.4.1...3.4.2)actions/checkout (actions/checkout)
### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776)Tinche/aiofiles (aiofiles)
### [`v24.1.0`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v24.1.0): 24.1.0 [Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.2.1...v24.1.0) - Import `os.link` conditionally to fix importing on android. [#175](https://redirect.github.com/Tinche/aiofiles/issues/175) - Remove spurious items from `aiofiles.os.__all__` when running on Windows. - Switch to more modern async idioms: Remove types.coroutine and make AiofilesContextManager an awaitable instead a coroutine. - Add `aiofiles.os.path.abspath` and `aiofiles.os.getcwd`. [#174](https://redirect.github.com/Tinche/aiofiles/issues/181) - *aiofiles* is now tested on Python 3.13 too. [#184](https://redirect.github.com/Tinche/aiofiles/pull/184) - Dropped Python 3.7 support. If you require it, use version 23.2.1. ### [`v23.2.1`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v23.2.1): 23.2.1 [Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.2.0...v23.2.1) - Import `os.statvfs` conditionally to fix importing on non-UNIX systems. [#171](https://redirect.github.com/Tinche/aiofiles/issues/171) [#172](https://redirect.github.com/Tinche/aiofiles/pull/172) - aiofiles is now also tested on Windows. ### [`v23.2.0`](https://redirect.github.com/Tinche/aiofiles/releases/tag/v23.2.0): 23.2.0 [Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v23.1.0...v23.2.0) ### 23.2.0 - aiofiles is now tested on Python 3.12 too. [#166](https://redirect.github.com/Tinche/aiofiles/issues/166) [#168](https://redirect.github.com/Tinche/aiofiles/pull/168) - On Python 3.12, `aiofiles.tempfile.NamedTemporaryFile` now accepts a `delete_on_close` argument, just like the stdlib version. - On Python 3.12, `aiofiles.tempfile.NamedTemporaryFile` no longer exposes a `delete` attribute, just like the stdlib version. - Added `aiofiles.os.statvfs` and `aiofiles.os.path.ismount`. [#162](https://redirect.github.com/Tinche/aiofiles/pull/162) - Use [PDM](https://pdm.fming.dev/latest/) instead of Poetry. [#169](https://redirect.github.com/Tinche/aiofiles/pull/169) ### [`v23.1.0`](https://redirect.github.com/Tinche/aiofiles/compare/v22.1.0...v23.1.0) [Compare Source](https://redirect.github.com/Tinche/aiofiles/compare/v22.1.0...v23.1.0)aio-libs/aiohttp (aiohttp)
### [`v3.10.5`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3105-2024-08-19) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.4...v3.10.5) \========================= ## Bug fixes - Fixed :meth:`aiohttp.ClientResponse.json()` not setting `status` when :exc:`aiohttp.ContentTypeError` is raised -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`8742`. ## Miscellaneous internal changes - Improved performance of the WebSocket reader -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`8736`, :issue:`8747`. *** ### [`v3.10.4`](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.3...v3.10.4) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.3...v3.10.4) ### [`v3.10.3`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3103-2024-08-10) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.2...v3.10.3) \======================== ## Bug fixes - Fixed multipart reading when stream buffer splits the boundary over several read() calls -- by :user:`Dreamsorcerer`. *Related issues and pull requests on GitHub:* :issue:`8653`. - Fixed :py:class:`aiohttp.TCPConnector` doing blocking I/O in the event loop to create the `SSLContext` -- by :user:`bdraco`. The blocking I/O would only happen once per verify mode. However, it could cause the event loop to block for a long time if the `SSLContext` creation is slow, which is more likely during startup when the disk cache is not yet present. *Related issues and pull requests on GitHub:* :issue:`8672`. ## Miscellaneous internal changes - Improved performance of :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` when there is no timeout. -- by :user:`bdraco`. The timeout context manager is now avoided when there is no timeout as it accounted for up to 50% of the time spent in the :py:meth:`~aiohttp.ClientWebSocketResponse.receive` and :py:meth:`~aiohttp.web.WebSocketResponse.receive` methods. *Related issues and pull requests on GitHub:* :issue:`8660`. - Improved performance of starting request handlers with Python 3.12+ -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`8661`. - Improved performance of HTTP keep-alive checks -- by :user:`bdraco`. Previously, when processing a request for a keep-alive connection, the keep-alive check would happen every second; the check is now rescheduled if it fires too early instead. *Related issues and pull requests on GitHub:* :issue:`8662`. - Improved performance of generating random WebSocket mask -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`8667`. *** ### [`v3.10.2`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3102-2024-08-08) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.1...v3.10.2) \=================== ## Bug fixes - Fixed server checks for circular symbolic links to be compatible with Python 3.13 -- by :user:`steverep`. *Related issues and pull requests on GitHub:* :issue:`8565`. - Fixed request body not being read when ignoring an Upgrade request -- by :user:`Dreamsorcerer`. *Related issues and pull requests on GitHub:* :issue:`8597`. - Fixed an edge case where shutdown would wait for timeout when the handler was already completed -- by :user:`Dreamsorcerer`. *Related issues and pull requests on GitHub:* :issue:`8611`. - Fixed connecting to `npipe://`, `tcp://`, and `unix://` urls -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`8632`. - Fixed WebSocket ping tasks being prematurely garbage collected -- by :user:`bdraco`. There was a small risk that WebSocket ping tasks would be prematurely garbage collected because the event loop only holds a weak referenConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.