dependabot[bot]
commented
5 years ago OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps buildbot from 0.8.5 to 1.8.2.
Release notes
*Sourced from [buildbot's releases](https://github.com/buildbot/buildbot/releases).* > ## v1.8.2 > Bug fixes > --------- > > - Fix vulnerability in OAuth where user-submitted authorization token was used for authentication > (https://github.com/buildbot/buildbot/wiki/OAuth-vulnerability-in-using-submitted-authorization-token-for-authentication). Thanks to Phillip Kuhrt for reporting it. > > ## v1.8.1 > > Bug fixes > --------- > > - Fix CRLF injection vulnerability with validating user provided redirect parameters (https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code) > Thanks to ``mik317`` and ``mariadb`` for reporting it. > > ## v1.8.0 > > Bug fixes > --------- > > - Fix a regression present in v1.7.0 which caused buildrequests waiting for a > lock that got released by an unrelated build not be scheduled (:issue:`4491`) > - Don't run builds that request an instance with incompatible properties on > Docker, Marathon and OpenStack latent workers. > - Gitpoller now fetches only branches that are known to exist on remote. > Non-existing branches are quietly ignored. > - The demo repo in sample configuration files and the tutorial is now fetched > via ``https:`` instead of ``git:`` to make life easier for those behind > firewalls and/or using proxies. > - `buildbot sendchange` has been fixed on Python 3 (:issue:`4138`) > > Features > -------- > > - Add a :py:class:`~buildbot.worker.kubernetes.KubeLatentWorker` to launch > workers into a kubernetes cluster > - Simplify/automate configuration of worker as Windows service - eliminate > manual configuration of Log on as a service > > Deprecations and Removals > ------------------------- > > - The deprecated ``BuildMaster.addBuildset`` method has been removed. Use > ``BuildMaster.data.updates.addBuildset`` instead. > - The deprecated ``BuildMaster.addChange`` method has been removed. Use > ``BuildMaster.data.updates.addChange`` instead. > - ``buildbot`` package now requires Twisted versions >= 17.9.0. This is > required for Python 3 support. Earlier versions of Twisted are not supported. > > ## v1.7.0 > ... (truncated)Commits
- [`e2db879`](https://github.com/buildbot/buildbot/commit/e2db8794b1353f3a81d225697601bb09909b99b1) Merge pull request [#4789](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4789) from p12tic/1.8.x-release - [`a844457`](https://github.com/buildbot/buildbot/commit/a844457f0539841b4f695ffebb343eab2be6f248) docs: Update spelling word list - [`0fb4417`](https://github.com/buildbot/buildbot/commit/0fb44172475863f71885d4f993108f0d93cbac85) relnotes: Add relnote for v1.8.2 - [`cdced04`](https://github.com/buildbot/buildbot/commit/cdced04dfbbcac02f7df868e01c1000fb0ab54d4) relnotes: Add relnote for v1.8.1 - [`4bcf908`](https://github.com/buildbot/buildbot/commit/4bcf908392e0deae1409bae112fa8a7506e15736) Merge pull request [#4787](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4787) from p12tic/1.8.x-fix-tests - [`7b08a43`](https://github.com/buildbot/buildbot/commit/7b08a43e6428510ae608c80e563e0f6887ccc8b6) www: Pin buildbot-data upper version at 2.2.4 - [`2de0d7f`](https://github.com/buildbot/buildbot/commit/2de0d7f54607dc06424e9cd3e028839b24e6c043) Merge pull request [#4784](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4784) from p12tic/1.8.x-no-token - [`bdd886e`](https://github.com/buildbot/buildbot/commit/bdd886ea348735b7e3b08f93dc2d123ddfecbaa2) smokes: Log how exactly webdriver-manager is invoked - [`bdeaf36`](https://github.com/buildbot/buildbot/commit/bdeaf36c873340126b4afc99dd0071aeefbbe0eb) smokes: Update webdriver script to new version of webdriver-manager - [`805f3d8`](https://github.com/buildbot/buildbot/commit/805f3d83de487c97388559164aa32615866efa14) smokes: Upgrade dependencies to bring in webdriver 12.1.4 - Additional commits viewable in [compare view](https://github.com/buildbot/buildbot/compare/v0.8.5...v1.8.2)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/wd15/extremefill/network/alerts).