Tableau Python Server (TabPy) installations may be configured to execute arbitrary python code without authentication

v2.9.0

An unauthenticated attacker could perform remote code execution on TabPy instances that do not have authentication enabled. This release now requires confirmation to continue when starting TabPy without authentication, with a warning that this is an insecure state and not recommended.

Change to scikit-learn from sklearn

This pull request is to update to version 2.6.0 for TabPy.
It will include these improvements:

Fixes deprecation of sklearn in favor of current package name scikit-learn

It will include these breaking changes:

n/a

TabPy support for Python 3.9

Improvements

• A server with Adhoc Disabled Flag on with the wrong credentials will now
  return wrong credentials error instead of telling the user
  that Adhoc Scripts are not allowed on this server.
• Added documentation for how to run TabPy projects with local changes

Breaking changes

• Discontinued support for Python 3.6
• Added support for Python 3.9

Add toggle to turn off evaluate API

v2.4.0

Improvements

• Add toggle to turn off evaluate API.

Breaking changes

• Changing error code to 406 when server not configured for authentication
  but credentials are provided by client.

Add test files to .tar.gz and .zip releases

v2.3.2

Improvements

• Add test files to .tar.gz and .zip releases.

Fixed deployed functions overriding

Bug fixes

• Overriding deployed models.

Improvements

• Fixed scrutinizer test run failure.

Auth Bug Fix

v2.2.0

Breaking changes

• TabPy fails with 400 when it is not configure for authentication
  but credentials are provided by client.

Bug fixes

• When TabPy is running with no console attached it is not failing
  with 500 when trying to respond with 401 status.
• tabpy.query() failing when auth is configured.

Improvements

• Minor code cleanup.

v 1.1.0: Securing /info with auth

Improvements

• Authorization is now required for the /info API method.
  This method did not check authentication previously. This change is
  backwards compatible with Tableau clients.

• Improved config parsing flexibility. Previously the
  TABPY_EVALUATE_TIMEOUT setting would be set to a default if
  tabpy couldn't parse the value. Now it will throw an exception
  at startup.

TabPy v1.0.0: Tableau Supported now!

Improvements

• Minor: feature name changed to analytics extensions.
• Startup script files deleted.
• Index page updated.

Other

• TabPy is now Tableau Supported (used to be Community Supported).

v0.9.0: Fix model deployment with removing usage of pip._internal

Improvements

• Models deployment doesn't depend on pip._internal anymore.
• Package size reduced.