Release notes
*Sourced from [buildbot's releases](https://github.com/buildbot/buildbot/releases).*
> ## v1.8.2
> Bug fixes
> ---------
>
> - Fix vulnerability in OAuth where user-submitted authorization token was used for authentication
> (https://github.com/buildbot/buildbot/wiki/OAuth-vulnerability-in-using-submitted-authorization-token-for-authentication). Thanks to Phillip Kuhrt for reporting it.
>
> ## v1.8.1
>
> Bug fixes
> ---------
>
> - Fix CRLF injection vulnerability with validating user provided redirect parameters (https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code)
> Thanks to ``mik317`` and ``mariadb`` for reporting it.
>
> ## v1.8.0
>
> Bug fixes
> ---------
>
> - Fix a regression present in v1.7.0 which caused buildrequests waiting for a
> lock that got released by an unrelated build not be scheduled (:issue:`4491`)
> - Don't run builds that request an instance with incompatible properties on
> Docker, Marathon and OpenStack latent workers.
> - Gitpoller now fetches only branches that are known to exist on remote.
> Non-existing branches are quietly ignored.
> - The demo repo in sample configuration files and the tutorial is now fetched
> via ``https:`` instead of ``git:`` to make life easier for those behind
> firewalls and/or using proxies.
> - `buildbot sendchange` has been fixed on Python 3 (:issue:`4138`)
>
> Features
> --------
>
> - Add a :py:class:`~buildbot.worker.kubernetes.KubeLatentWorker` to launch
> workers into a kubernetes cluster
> - Simplify/automate configuration of worker as Windows service - eliminate
> manual configuration of Log on as a service
>
> Deprecations and Removals
> -------------------------
>
> - The deprecated ``BuildMaster.addBuildset`` method has been removed. Use
> ``BuildMaster.data.updates.addBuildset`` instead.
> - The deprecated ``BuildMaster.addChange`` method has been removed. Use
> ``BuildMaster.data.updates.addChange`` instead.
> - ``buildbot`` package now requires Twisted versions >= 17.9.0. This is
> required for Python 3 support. Earlier versions of Twisted are not supported.
>
> ## v1.7.0
> ... (truncated)
Commits
- [`e2db879`](https://github.com/buildbot/buildbot/commit/e2db8794b1353f3a81d225697601bb09909b99b1) Merge pull request [#4789](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4789) from p12tic/1.8.x-release
- [`a844457`](https://github.com/buildbot/buildbot/commit/a844457f0539841b4f695ffebb343eab2be6f248) docs: Update spelling word list
- [`0fb4417`](https://github.com/buildbot/buildbot/commit/0fb44172475863f71885d4f993108f0d93cbac85) relnotes: Add relnote for v1.8.2
- [`cdced04`](https://github.com/buildbot/buildbot/commit/cdced04dfbbcac02f7df868e01c1000fb0ab54d4) relnotes: Add relnote for v1.8.1
- [`4bcf908`](https://github.com/buildbot/buildbot/commit/4bcf908392e0deae1409bae112fa8a7506e15736) Merge pull request [#4787](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4787) from p12tic/1.8.x-fix-tests
- [`7b08a43`](https://github.com/buildbot/buildbot/commit/7b08a43e6428510ae608c80e563e0f6887ccc8b6) www: Pin buildbot-data upper version at 2.2.4
- [`2de0d7f`](https://github.com/buildbot/buildbot/commit/2de0d7f54607dc06424e9cd3e028839b24e6c043) Merge pull request [#4784](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4784) from p12tic/1.8.x-no-token
- [`bdd886e`](https://github.com/buildbot/buildbot/commit/bdd886ea348735b7e3b08f93dc2d123ddfecbaa2) smokes: Log how exactly webdriver-manager is invoked
- [`bdeaf36`](https://github.com/buildbot/buildbot/commit/bdeaf36c873340126b4afc99dd0071aeefbbe0eb) smokes: Update webdriver script to new version of webdriver-manager
- [`805f3d8`](https://github.com/buildbot/buildbot/commit/805f3d83de487c97388559164aa32615866efa14) smokes: Upgrade dependencies to bring in webdriver 12.1.4
- Additional commits viewable in [compare view](https://github.com/buildbot/buildbot/compare/v1.1.0...v1.8.2)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
Bumps buildbot from 1.1.0 to 1.8.2.
Release notes
*Sourced from [buildbot's releases](https://github.com/buildbot/buildbot/releases).* > ## v1.8.2 > Bug fixes > --------- > > - Fix vulnerability in OAuth where user-submitted authorization token was used for authentication > (https://github.com/buildbot/buildbot/wiki/OAuth-vulnerability-in-using-submitted-authorization-token-for-authentication). Thanks to Phillip Kuhrt for reporting it. > > ## v1.8.1 > > Bug fixes > --------- > > - Fix CRLF injection vulnerability with validating user provided redirect parameters (https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code) > Thanks to ``mik317`` and ``mariadb`` for reporting it. > > ## v1.8.0 > > Bug fixes > --------- > > - Fix a regression present in v1.7.0 which caused buildrequests waiting for a > lock that got released by an unrelated build not be scheduled (:issue:`4491`) > - Don't run builds that request an instance with incompatible properties on > Docker, Marathon and OpenStack latent workers. > - Gitpoller now fetches only branches that are known to exist on remote. > Non-existing branches are quietly ignored. > - The demo repo in sample configuration files and the tutorial is now fetched > via ``https:`` instead of ``git:`` to make life easier for those behind > firewalls and/or using proxies. > - `buildbot sendchange` has been fixed on Python 3 (:issue:`4138`) > > Features > -------- > > - Add a :py:class:`~buildbot.worker.kubernetes.KubeLatentWorker` to launch > workers into a kubernetes cluster > - Simplify/automate configuration of worker as Windows service - eliminate > manual configuration of Log on as a service > > Deprecations and Removals > ------------------------- > > - The deprecated ``BuildMaster.addBuildset`` method has been removed. Use > ``BuildMaster.data.updates.addBuildset`` instead. > - The deprecated ``BuildMaster.addChange`` method has been removed. Use > ``BuildMaster.data.updates.addChange`` instead. > - ``buildbot`` package now requires Twisted versions >= 17.9.0. This is > required for Python 3 support. Earlier versions of Twisted are not supported. > > ## v1.7.0 > ... (truncated)Commits
- [`e2db879`](https://github.com/buildbot/buildbot/commit/e2db8794b1353f3a81d225697601bb09909b99b1) Merge pull request [#4789](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4789) from p12tic/1.8.x-release - [`a844457`](https://github.com/buildbot/buildbot/commit/a844457f0539841b4f695ffebb343eab2be6f248) docs: Update spelling word list - [`0fb4417`](https://github.com/buildbot/buildbot/commit/0fb44172475863f71885d4f993108f0d93cbac85) relnotes: Add relnote for v1.8.2 - [`cdced04`](https://github.com/buildbot/buildbot/commit/cdced04dfbbcac02f7df868e01c1000fb0ab54d4) relnotes: Add relnote for v1.8.1 - [`4bcf908`](https://github.com/buildbot/buildbot/commit/4bcf908392e0deae1409bae112fa8a7506e15736) Merge pull request [#4787](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4787) from p12tic/1.8.x-fix-tests - [`7b08a43`](https://github.com/buildbot/buildbot/commit/7b08a43e6428510ae608c80e563e0f6887ccc8b6) www: Pin buildbot-data upper version at 2.2.4 - [`2de0d7f`](https://github.com/buildbot/buildbot/commit/2de0d7f54607dc06424e9cd3e028839b24e6c043) Merge pull request [#4784](https://github-redirect.dependabot.com/buildbot/buildbot/issues/4784) from p12tic/1.8.x-no-token - [`bdd886e`](https://github.com/buildbot/buildbot/commit/bdd886ea348735b7e3b08f93dc2d123ddfecbaa2) smokes: Log how exactly webdriver-manager is invoked - [`bdeaf36`](https://github.com/buildbot/buildbot/commit/bdeaf36c873340126b4afc99dd0071aeefbbe0eb) smokes: Update webdriver script to new version of webdriver-manager - [`805f3d8`](https://github.com/buildbot/buildbot/commit/805f3d83de487c97388559164aa32615866efa14) smokes: Upgrade dependencies to bring in webdriver 12.1.4 - Additional commits viewable in [compare view](https://github.com/buildbot/buildbot/compare/v1.1.0...v1.8.2)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language