mozilla-services / autopush

Python Web Push Server used by Mozilla
https://autopush.readthedocs.io/
Mozilla Public License 2.0
217 stars 34 forks source link

Scheduled daily dependency update on saturday #1309

Closed pyup-bot closed 5 years ago

pyup-bot commented 5 years ago

Update msgpack from 0.5.6 to 0.6.0.

Changelog ### 0.6 ``` ------------------ New features: - Added `msgpack2json` continuous mode (`-c` and `-C`) to convert a stream of top-level objects (4) Bug fixes: - Fixed a bug that could cause a newline to be printed incorrectly in pretty-printing mode ``` ### 0.6.0 ``` ====== Release Date: 2018-11-30 This release contains some backward incompatible changes for security reason (DoS). Important changes ----------------- * unpacker: Default value of input limits are smaller than before to avoid DoS attack. If you need to handle large data, you need to specify limits manually. (319) * Unpacker doesn't wrap underlaying ``ValueError`` (including ``UnicodeError``) into ``UnpackValueError``. If you want to catch all exception during unpack, you need to use ``try ... except Exception`` with minimum try code block. (323, 233) * ``PackValueError`` and ``PackOverflowError`` are also removed. You need to catch normal ``ValueError`` and ``OverflowError``. (323, 233) * Unpacker has ``strict_map_key`` option now. When it is true, only bytes and str (unicode in Python 2) are allowed for map keys. It is recommended to avoid hashdos. Default value of this option is False for backward compatibility reason. But it will be changed True in 1.0. (296, 334) Other changes ------------- * Extension modules are merged. There is ``msgpack._cmsgpack`` instead of ``msgpack._packer`` and ``msgpack._unpacker``. (314, 328) * Add ``Unpacker.getbuffer()`` method. (320) * unpacker: ``msgpack.StackError`` is raised when input data contains too nested data. (331) * unpacker: ``msgpack.FormatError`` is raised when input data is not valid msgpack format. (331) ``` ### 0.5.12 ``` * Added support for JRuby 9K. * Added a benchmarking suite. * Fixed a bug in the handling of options given to MessagePack.unpack in JRuby. ``` ### 0.5.11 ``` NEW FEATURE * `MessagePackIgnoreAttribute` to exclude properties. Issue 55 ``` ### 0.5.10 ``` CHANGES * WinRT and Windows Phone (not Silverlight) builds now do not have AllowPartiallyTrustedCallersAttribute because it causes MethodAccessException on Windows Phone. This should not be breaking change effectively because apps in app container themselves should be SecurityCritical. Issue 64. BUG FIXES * Avoid memcmp usage for Windows Phone App Certification. Issue 65. ``` ### 0.5.9 ``` * Fixed Unpackerread_map_header and read_array_header * Added support for Symbol GC added since MRI 2.2.0 ``` ### 0.5.8 ``` BUG FIXES * Fix Unpacker fails to unpack data when the stream returns data one by one. Issue 59 * Fix Unpacker cannot read empty bytes from System.Net API. Issue 60 Relase 0.5.9 - 2015/2/01 BUG FIXES * Fix NullReferenceException is thrown for annotated non-public members serialization/deserialization in WinRT. * Fix collection typed property which has non-public setter are not handled correctly. Issue 62. * Fix ArgumentOutOfRangeException occurs when serializing members count is greater than 127. Issue 63. ``` ### 0.5.7 ``` BUG FIXES * Fix serializer uses unnecessary reflection to get collection typed property. * Fix generated serializers in source code style may have extra fields when multiple serializers are generated at a time. * Mpu.exe's --refernce option distinction now respects platform rules and uses absolute paths instead of relative paths. * Fix lambda expressions in source code causes failure of mpu.exe in Mono. IMPROVEMENTS * Add mpu.exe -r option which is shorthand of --reference. * Add default and implicit --reference=./MsgPack.dll option in mpu.exe ```
Links - PyPI: https://pypi.org/project/msgpack - Changelog: https://pyup.io/changelogs/msgpack/ - Homepage: https://msgpack.org/
codecov-io commented 5 years ago

Codecov Report

Merging #1309 into master will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@          Coverage Diff           @@
##           master   #1309   +/-   ##
======================================
  Coverage    99.8%   99.8%           
======================================
  Files          64      64           
  Lines       10389   10389           
======================================
  Hits        10369   10369           
  Misses         20      20

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update e185738...b7f8f64. Read the comment docs.

pyup-bot commented 5 years ago

Closing this in favor of #1310