Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PyUP - Scheduled daily dependency update on wednesday #226

Closed
wants to merge 2 commits into from

Conversation

pyup-bot
Copy link
Contributor

Update celery from 4.2.0 to 4.2.1.

Changelog

4.2.1

=====
:release-date: 2018-07-18 11:00 AM IST
:release-by: Omer Katz

- **Result Backend**: Fix deserialization of exceptions that are present in the producer codebase but not in the consumer codebase.

Contributed by **John Arnold**

- **Message Protocol Compatibility**: Fix error caused by an invalid (None) timelimit value in the message headers when migrating messages from 3.x to 4.x.

Contributed by **Robert Kopaczewski**

- **Result Backend**: Fix serialization of exception arguments when exception arguments are not JSON serializable by default.

Contributed by **Tom Booth**

- **Worker**: Fixed multiple issues with rate limited tasks

Maintain scheduling order.
Fix possible scheduling of a :class:`celery.worker.request.Request` with the wrong :class:`kombu.utils.limits.TokenBucket` which could cause tasks' rate limit to behave incorrectly. 
Fix possible duplicated execution of tasks that were rate limited or if ETA/Countdown was provided for them.

Contributed by :github_user:`ideascf`

- **Worker**: Defensively handle invalid timelimit header values in requests.

Contributed by **Omer Katz**

Documentation fixes:


 - **Matt Wiens**
 - **Seunghun Lee**
 - **Lewis M. Kabui**
 - **Prathamesh Salunkhe**
Links

Update cryptography from 2.2.2 to 2.3.

Changelog

2.3

~~~~~~~~~~~~~~~~

* **SECURITY ISSUE:**
:meth:`~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_with_tag`
allowed tag truncation by default which can allow tag forgery in some cases.
The method now enforces the ``min_tag_length`` provided to the
:class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` constructor.
* Added support for Python 3.7.
* Added :meth:`~cryptography.fernet.Fernet.extract_timestamp` to get the
authenticated timestamp of a :doc:`Fernet </fernet>` token.
* Support for Python 2.7.x without ``hmac.compare_digest`` has been deprecated.
We will require Python 2.7.7 or higher (or 2.7.6 on Ubuntu) in the next
``cryptography`` release.
* Fixed multiple issues preventing ``cryptography`` from compiling against
LibreSSL 2.7.x.
* Added
:class:`~cryptography.x509.CertificateRevocationList.get_revoked_certificate_by_serial_number`
for quick serial number searches in CRLs.
* The :class:`~cryptography.x509.RelativeDistinguishedName` class now
preserves the order of attributes. Duplicate attributes now raise an error
instead of silently discarding duplicates.
* :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap` and
:func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding`
now raise :class:`~cryptography.hazmat.primitives.keywrap.InvalidUnwrap` if
the wrapped key is an invalid length, instead of ``ValueError``.

.. _v2-2-2:
Links

@coveralls
Copy link

coveralls commented Jul 18, 2018

Coverage Status

Coverage remained the same at 41.078% when pulling 186bc82 on pyup-scheduled-update-2018-07-18 into bda6b2d on dev.

@pyup-bot
Copy link
Contributor Author

Closing this in favor of #227

@pyup-bot pyup-bot closed this Jul 19, 2018
@DEKHTIARJonathan DEKHTIARJonathan deleted the pyup-scheduled-update-2018-07-18 branch July 19, 2018 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants