tonybaloney / pycharm-security

Finds security holes in your Python projects from PyCharm and GitHub
https://pycharm-security.readthedocs.io/en/latest/?badge=latest
MIT License
327 stars 21 forks source link

Bump ktor_version from 1.6.8 to 2.1.3 #387

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps ktor_version from 1.6.8 to 2.1.3. Updates ktor-client-core from 1.6.8 to 2.1.3

Release notes

Sourced from ktor-client-core's releases.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Changelog

Sourced from ktor-client-core's changelog.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Commits


Updates ktor-client-apache from 1.6.8 to 2.1.3

Release notes

Sourced from ktor-client-apache's releases.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Changelog

Sourced from ktor-client-apache's changelog.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Commits


Updates ktor-client-gson from 1.6.8 to 2.1.3

Release notes

Sourced from ktor-client-gson's releases.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Changelog

Sourced from ktor-client-gson's changelog.

2.1.3

Published 26 October 2022

  • JS: window.location.origin returns null when executed in iframe via srcdoc attribute (KTOR-4993)
  • SensitivityWatchEventModifier - Move the reflection call of this modifier out from the Ktor Core (KTOR-1647)
  • "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
  • HOCON: CLI parameters don't override custom properties since 2.1.0 (KTOR-5000)
  • Websockets timeout doesn't cause a close of a connection (KTOR-3504)
  • DefaultHeaders: a header is duplicated in a StatusPages's handler (KTOR-4990)
  • Websockets: timeout doesn't cause closing of incoming and outgoing channels (KTOR-2430)
  • RFC 3986 recommendation for encoding URI is NOT followed (KTOR-993)
  • Cookies: Invalid encoding of cookies' values since 1.4.0 (KTOR-917)
  • ByteReadChannel is unable to read files with long lines (KTOR-2588)
  • WebSocketDeflateExtension configureProtocols always failed with stackOverflow (KTOR-4916)
  • Update Kotlin to 1.7.20 (KTOR-4963)
  • Netty HTTP/2: response headers contain ":status" header and that leads to IllegalHeaderNameException in the ConditionalHeaders plugin (KTOR-4943)
  • Maven: ktor-server-test-host-jvm causes dependency error starting from Ktor 2.0.3 (KTOR-4900)
  • Autoreloading: "Flow invariant is violated" error since Ktor 2.0.3 (KTOR-4926)
  • Autoreloading: ClassCastException when retrieving plugins in testApplication (KTOR-4729)
  • CIO engine has wrong doc for request timeout (KTOR-4941)
  • CIO: A request through a proxy server results in 403 from Cloudflare (KTOR-4925)

2.1.2

Published 29 September 2022

  • HttpCacheEntry ignoring Request Cache-Control directives (KTOR-4894)
  • testApplication does not handle port and connectors (KTOR-4875)
  • Native: Wrong status code when requesting with DELETE method and body (KTOR-3566)
  • Default host address 0.0.0.0 isn't reachable on Windows (KTOR-4834)
  • TestApplicationEngine error handling is inconsistent with DefaultEnginePipeline, breaking clients (KTOR-4009)
  • Routing: Wrong content-type results in 400 Bad Request instead of 415 Unsupported Media type (KTOR-4849)

2.1.1

Published 6 September 2022

  • CIO: responses are received with a huge delay on JVM Windows (due to reverse DNS lookup internally) (KTOR-4827)
  • Netty HTTP/2 not working (KTOR-578)
  • HTTP/2 push fails with Netty engine (KTOR-800)
  • HttpCookies: no space between cookie pairs (KTOR-3854)
  • Netty ALPN provider detection not working (KTOR-4712)
  • CIO: Connection reset by peer on MacOS (KTOR-2036)
  • CallLogging MDC with sessions: Application feature Sessions is not installed (KTOR-550)
  • Deprecate Public API with Atomicfu Declarations (KTOR-4774)
  • Deprecate receiveOrNull because it's confusing (KTOR-4772)
  • Server ContentNegotiation Plugin doesn't check ignoredTypes for Request Body (KTOR-4770)
  • IllegalArgumentException is thrown when UnixSocketAddress.path is accessed on JVM (JDK 16+) (KTOR-4695)
  • WebSocketDeflateExtension not following RFC (KTOR-4696)
  • The parseWebSocketExtensions function behaves incorrectly (KTOR-3189)
  • Receive non-Nullable Type Throws NPE in Case of Failure (KTOR-4771)
  • Darwin: Symbol not found: OBJC_CLASS$_NSURLSessionWebSocketMessage on iOS 12 (KTOR-4159)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #399.