Bump nautobot from 2.0.0 to 2.1.2

Bumps nautobot from 2.0.0 to 2.1.2.

Release notes

v2.1.2 - 2024-01-22

What's Changed

Security

#5054 - Added validation of redirect URLs to the "Add a new IP Address" and "Assign an IP Address" views.

#5109 - Removed /files/get/ URL endpoint (for viewing FileAttachment files in the browser), as it was unused and could potentially pose security issues.

#5133 - Fixed an XSS vulnerability (GHSA-v4xv-795h-rv4h) in the render_markdown() utility function used to render comments, notes, job log entries, etc.

Added

#3877 - Added global filtering to Job Result log table, enabling search across all pages.

#5102 - Enhanced the sanitize function to also handle sanitization of lists and tuples of strings.

#5133 - Enhanced Markdown-supporting fields (comments, description, Notes, Job log entries, etc.) to also permit the use of a limited subset of "safe" HTML tags and attributes.

Changed

#5102 - Changed the nautobot-server runjob management command to check whether the requested user has permission to run the requested job.

#5102 - Changed the nautobot-server runjob management command to check whether the requested job is installed and enabled.

#5102 - Changed the nautobot-server runjob management command to check whether a Celery worker is running when invoked without the --local flag.

#5131 - Improved the performance of the /api/dcim/locations/ REST API.

Removed

#5078 - Removed nautobot-server startplugin management command.

Fixed

#4075 - Fixed sorting of Device Bays list view by installed device status.

#4444 - Fixed Sync Git Repository requires non-matching permissions for UI vs API.

#4998 - Fixed inability to import CSVs where later rows include references to records defined by earlier rows.

#5024 - Improved performance of the Job Result list view by optimizing the way JobLogEntry records are queried.

#5024 - Improved performance of the Device list view by including the manufacturer name in the table queryset.

#5024 - Improved performance of most ObjectListViews by optimizing how Custom fields, Computed fields, and Relationships are queried.

#5024 - Fixed a bug that caused IPAddress objects to query their parent Prefix and Namespace every time they were instantiated.

#5024 - Improved performance of the IPAddress list view by including the namespace in the table queryset.

#5024 - Updated bulk-edit and bulk-delete views to auto-hide any "actions" column in the table of objects being edited or deleted.

#5031 - Updated the default sanitizer pattern to include secret(s) and to be flexible with python dictionaries.

#5043 - Fixed early return conditional in ensure_git_repository.

#5045 - Adjusted Bootstrap grid breakpoints to account for the space occupied by the sidebar, fixing various page rendering.

#5054 - Fixed missing search logic on the "Assign an IP Address" view.

#5058 - Changed filter query parameters from location_id to location in virtualization/forms.py.

#5081 - Fixed core.tables.BaseTable to terminate dynamic queryset's building of pre-fetched fields upon first non-RelatedField of a column.

#5095 - Fixed a couple of potential KeyError when refreshing Git repository Jobs.

#5095 - Fixed color highlighting of error and critical log entries when viewing a Job Result.

#5102 - Fixed missing log messages when errors occur during Job.__call__() initial setup.

#5102 - Fixed misleading "Job completed" message from being logged when a Job aborted.

#5102 - Fixed an error in nautobot-server runjob if a job returned data other than a dict.

#5102 - Fixed misleading "SUCCESS" message when nautobot-server runjob resulted in any JobResult status other than "FAILED".

#5102 - Fixed incorrect JobResult data when using nautobot-server runjob --local or JobResult.execute_job().

... (truncated)

Commits

4b7fa19 Merge pull request #5136 from nautobot/release/2.1.2
0ca4d7b Update v1.6 release-notes content
e2408c7 Update release-note
072bf75 Merge branch 'develop' into release/2.1.2
de65e29 Add TreeManager.max_depth cachedproperty as an alternative to `max_tree_dep...
dfc9950 Update release note
b0e047e Merge branch 'develop' into release/2.1.2
a80a736 Fixes #5058: use location instead of location_id in vm forms (#5124)
2b3004e Towncrier and version bump
17effcb Sanitize render_markdown() output with nh3 library (#5133)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nautobot/nautobot-app-nornir/network/alerts).

nautobot / nautobot-app-nornir

Bump nautobot from 2.0.0 to 2.1.2 #133

v2.1.2 - 2024-01-22

What's Changed

Security

Added

Changed

Removed

Fixed