Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data
part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.
Fixed "Unclosed client session" when initialization of
:py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.
Related issues and pull requests on GitHub:
:issue:8253.
Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data
part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.
Related issues and pull requests on GitHub:
:issue:8332.
Added default Content-Disposition in multipart/form-data responses to avoid broken
form-data responses -- by :user:Dreamsorcerer.
Related issues and pull requests on GitHub:
:issue:8335.
to_ssh in VerifyingKey and SigningKey, supports Ed25519 keys only
(Pablo Mazzini)
New features:
Support for twisted Brainpool curves
Doc fix:
Fix curve equation in glossary
Documentation for signature encoding and signature decoding functions
Maintenance:
Dropped official support for 3.3 and 3.4 (because of problems running them
in CI, not because it's actually incompatible; support for 2.6 and 2.7 is
unaffected)
Fixes around hypothesis parameters
Officially support Python 3.11 and 3.12
Small updates to test suite to make it work with 3.11 and 3.12 and new
releases of test dependencies
Dropped the internal _rwlock module as it's unused
Added mutation testing to CI, lots of speed-ups to the test suite
to make it happen
Removal of unnecessary six.b literals (Alexandre Detiste)
Deprecations:
int_to_string, string_to_int, and digest_integer from ecdsa.ecdsa
module are now considered deprecated, they will be removed in a future
release
ecdsa 0.18.0
New features:
Support for EdDSA (Ed25519, Ed448) signature creation and verification.
Support for Ed25519 and Ed448 in PKCS#8 and public key files.
Support for point precomputation for EdDSA.
New API:
CurveEdTw class to represent the Twisted Edwards curve parameters.
PointEdwards class to represent points on Twisted Edwards curve and
provide point arithmetic on it.
curve_by_name in curves module to get a Curve object by providing curve
name.
to_ssh in VerifyingKey and SigningKey, supports Ed25519 keys only
(Pablo Mazzini)
New features:
Support for twisted Brainpool curves
Doc fix:
Fix curve equation in glossary
Documentation for signature encoding and signature decoding functions
Maintenance:
Dropped official support for 3.3 and 3.4 (because of problems running them
in CI, not because it's actually incompatible; support for 2.6 and 2.7 is
unaffected)
Fixes aroung hypothesis parameters
Officially support Python 3.11 and 3.12
Small updates to test suite to make it work with 3.11 and 3.12 and new
releases of test dependencies
Dropped the internal _rwlock module as it's unused
Added mutation testing to CI, lots of speed-ups to the test suite
to make it happen
Removal of unnecessary six.b literals (Alexandre Detiste)
Deprecations:
int_to_string, string_to_int, and digest_integer from ecdsa.ecdsa
module are now considered deprecated, they will be removed in a future
release
Release 0.18.0 (09 Jul 2022)
New API:
curve_by_name in curves module to get a Curve object by providing curve
name.
Bug fix:
Make the VerifyingKey encoded with explicit parameters use the same
kind of point encoding for public key and curve generator.
Better handling of malformed curve parameters (as in CVE-2022-0778);
make python-ecdsa raise MalformedPointError instead of AssertionError.
Doc fix:
Publish the documentation on https://ecdsa.readthedocs.io/,
include explanation of basics of handling of ECC data formats and how to use
the library for elliptic curve arithmetic.
Make object names more consistent, make them into hyperlinks on the
readthedocs documentation.
Make security note more explicit (Ian Rodney)
... (truncated)
Commits
be70016 Merge pull request #337 from tlsfuzzer/release-0.19
217735b allow early exit from worker processes when running mutation testing
Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data
part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.
Fixed "Unclosed client session" when initialization of
:py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.
Related issues and pull requests on GitHub:
:issue:8253.
Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data
part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.
Related issues and pull requests on GitHub:
:issue:8332.
Added default Content-Disposition in multipart/form-data responses to avoid broken
form-data responses -- by :user:Dreamsorcerer.
Related issues and pull requests on GitHub:
:issue:8335.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperledger/aries-endorser-service/network/alerts).
dependabot[bot]
commented
6 months ago
Updates the requirements on aiohttp, ecdsa and starlette to permit the latest version. Updates
aiohttpfrom 3.9.4 to 3.9.5Release notes
Sourced from aiohttp's releases.
Changelog
Sourced from aiohttp's changelog.
Commits
b844d42Release v3.9.5 (#8340)0415a4cPatchback/backports/3.9/5fd29467fb63efdfae1ace280cec36b1f8139567/pr 8290 (#8311)f21c6f2[PR #8335/5a6949da backport][3.9] Add Content-Disposition automatically (#8336)7eecdff[PR #8332/482e6cdf backport][3.9] Add set_content_disposition test (#8333)82fbe64[PR #8324/4a8fd08b backport][3.9] Add missing changelogs (#8330)01df7ecBump version7917ae2Merge 3.1Updates
ecdsafrom 0.17.0 to 0.19.0Release notes
Sourced from ecdsa's releases.
... (truncated)
Changelog
Sourced from ecdsa's changelog.
... (truncated)
Commits
be70016Merge pull request #337 from tlsfuzzer/release-0.19217735ballow early exit from worker processes when running mutation testing6e7adffdon't check rate if no tests executedc56030emake coveralls submission work with py2.6 again66d0d74add release notes for 0.19.0 release0d5a38cMerge pull request #156 from tomato42/cosmic-ray02c8350be more permissive for the PR mutation test coverage4845e8fbetter is_prime()09f0d10add hard timeout for test mutation test suitee16173btwo digit precision for the mutation score badgeUpdates
starlettefrom 0.36.2 to 0.37.2Release notes
Sourced from starlette's releases.
Changelog
Sourced from starlette's changelog.
Commits
554f368Version 0.37.2 (#2533)85d3573Bump the python-packages group with 7 updates (#2532)39dccd9Revert "Turnscope["client"]toNoneonTestClient(#2377)" (#2525)bd77d7dEnforce__future__.annotations(#2483)a4cd0b5Remove deprecatedappargument passed tohttpx.Clienton theTestClient...7533b61Addbytesto_RequestDatatype (#2510)74ccb96Version 0.37.1 (#2498)f724827Remove mypy skip flags (#2497)ac7e643Add type hints totest_responses.py(#2488)3f38038Add type hints totest_testclient.py(#2493)Updates
aiohttpto 3.9.5Release notes
Sourced from aiohttp's releases.
Changelog
Sourced from aiohttp's changelog.
Commits
b844d42Release v3.9.5 (#8340)0415a4cPatchback/backports/3.9/5fd29467fb63efdfae1ace280cec36b1f8139567/pr 8290 (#8311)f21c6f2[PR #8335/5a6949da backport][3.9] Add Content-Disposition automatically (#8336)7eecdff[PR #8332/482e6cdf backport][3.9] Add set_content_disposition test (#8333)82fbe64[PR #8324/4a8fd08b backport][3.9] Add missing changelogs (#8330)01df7ecBump version7917ae2Merge 3.1Updates
starlettefrom 0.35.1 to 0.36.2Release notes
Sourced from starlette's releases.
Changelog
Sourced from starlette's changelog.
Commits
554f368Version 0.37.2 (#2533)85d3573Bump the python-packages group with 7 updates (#2532)39dccd9Revert "Turnscope["client"]toNoneonTestClient(#2377)" (#2525)bd77d7dEnforce__future__.annotations(#2483)a4cd0b5Remove deprecatedappargument passed tohttpx.Clienton theTestClient...7533b61Addbytesto_RequestDatatype (#2510)74ccb96Version 0.37.1 (#2498)f724827Remove mypy skip flags (#2497)ac7e643Add type hints totest_responses.py(#2488)3f38038Add type hints totest_testclient.py(#2493)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show