chore(deps-dev): bump python-ldap from 3.4.5 to 3.4.7 by dependabot[bot] · Pull Request #40827 · apache/superset

dependabot · 2026-06-06T07:03:02Z

Bumps python-ldap from 3.4.5 to 3.4.7.

Release notes

3.4.7

No code changes, correcting for the fact that the previous release artifacts uploaded to PyPI contained unintended files.

3.4.6

Fixes:

attrlist parameter is now properly checked before use, avoiding memory errors due to type mismatches

Fixed errors with requestName/requestValue in extop.dds

ldif and ldap.schema modules now actively close sockets as they're finished with them

Infrastructure:

Package no longer requires setuptools-scm

Changelog

Sourced from python-ldap's changelog.

Released 3.4.7 2026-05-19

No code changes, correcting for the fact that the previous release artifacts uploaded to PyPI contained unintended files.

Released 3.4.6 2026-05-14

Fixes:

attrlist parameter is now properly checked before use, avoiding memory errors due to type mismatches

Fixed errors with requestName/requestValue in extop.dds

ldif and ldap.schema modules now actively close sockets as they're finished with them

Infrastructure:

Package no longer requires setuptools-scm

Released 3.4.5 2025-10-10

Security fixes:

CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in ldap.filter.escape_filter_chars with escape_mode=1; ensure proper escaping. (thanks to lukas-eu)

CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in ldap.dn.escape_dn_chars to \00 per RFC 4514. (thanks to aradona91)

Fixes:

ReconnectLDAPObject now properly reconnects on UNAVAILABLE, CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN), fixing reconnection issues especially during server restarts

Fixed syncrepl.py to use named constants instead of raw decimal values for result types

Fixed error handling in SearchNoOpMixIn to prevent a undefined variable error

Tests:

Added comprehensive reconnection test cases including concurrent operation handling and server restart scenarios

Doc/

Updated installation docs and fixed various documentation typos

Added ReadTheDocs configuration file

Infrastructure:

Add testing and document support for Python 3.13

Released 3.4.4 2022-11-17

... (truncated)

Commits

79f34cc Prepare a new release
4472afd Prepare a new release
f8aa289 CI: Drop 3.8 from CI as no longer supported in current images
311dbba fix(LDAPObject): Prevent memory errors in attrs_from_List
dee242c test: Test valid and invalid attrlist parameters
9257c17 ci(github): update github actions
2ecbc03 fix(ldif): explicitly close sockets after fetching URLs
5b173c9 fix(ldap.schema): Explicitly close url file to avoid ResourceWarning in Pytho...
1491b43 remove superfluous dependency on setuptools-scm
7e93577 fix(extop.dds): make passing of requestName optional again
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [python-ldap](https://github.com/python-ldap/python-ldap) from 3.4.5 to 3.4.7. - [Release notes](https://github.com/python-ldap/python-ldap/releases) - [Changelog](https://github.com/python-ldap/python-ldap/blob/python-ldap-3.4.7/CHANGES) - [Commits](python-ldap/python-ldap@python-ldap-3.4.5...python-ldap-3.4.7) --- updated-dependencies: - dependency-name: python-ldap dependency-version: 3.4.7 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

bito-code-review · 2026-06-06T07:03:11Z

Code Review Agent Run #4d1de3

Actionable Suggestions - 0

Filtered by Review Rules

Bito filtered these suggestions based on rules created automatically for your feedback. Manage rules.

pyproject.toml - 1
- CWE-707: Security Fix Verified · Line 234-234

Review Details

Files reviewed - 1 · Commit Range: 156806e..156806e
- pyproject.toml
Files skipped - 0
Tools
- Whispers (Secret Scanner) - ✔︎ Successful
- Detect-secrets (Secret Scanner) - ✔︎ Successful

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

/review - Manually triggers a full AI review.
/pause - Pauses automatic reviews on this pull request.
/resume - Resumes automatic reviews.
/resolve - Marks all Bito-posted review comments as resolved.
/abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

AI Code Review powered by

codecov · 2026-06-06T07:07:14Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.13%. Comparing base (b85a2cd) to head (79a9cea).

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #40827      +/-   ##
==========================================
- Coverage   64.13%   64.13%   -0.01%     
==========================================
  Files        2667     2667              
  Lines      144127   144127              
  Branches    33135    33135              
==========================================
- Hits        92434    92429       -5     
- Misses      50082    50085       +3     
- Partials     1611     1613       +2

Flag	Coverage Δ
hive	`39.73% <ø> (ø)`
mysql	`58.29% <ø> (ø)`
postgres	`58.36% <ø> (-0.01%)`	⬇️
presto	`41.32% <ø> (ø)`
python	`59.82% <ø> (-0.01%)`	⬇️
sqlite	`57.99% <ø> (ø)`
unit	`100.00% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

bito-code-review · 2026-06-06T10:53:18Z

Code Review Agent Run #6ab0c7

Actionable Suggestions - 0

Review Details

Files reviewed - 1 · Commit Range: 156806e..79a9cea
- requirements/development.txt
Files skipped - 0
Tools
- Whispers (Secret Scanner) - ✔︎ Successful
- Detect-secrets (Secret Scanner) - ✔︎ Successful

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

/review - Manually triggers a full AI review.
/pause - Pauses automatic reviews on this pull request.
/resume - Resumes automatic reviews.
/resolve - Marks all Bito-posted review comments as resolved.
/abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

AI Code Review powered by

dependabot Bot added dependabot pip Dependabot - pip related PRs labels Jun 6, 2026

pull-request-size Bot added the size/XS label Jun 6, 2026

dosubot Bot added the dependencies:python label Jun 6, 2026

github-actions Bot removed the dependencies:python label Jun 6, 2026

chore: regenerate development.txt lock for python-ldap 3.4.7

79a9cea

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump python-ldap from 3.4.5 to 3.4.7#40827

chore(deps-dev): bump python-ldap from 3.4.5 to 3.4.7#40827
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/pip/python-ldap-3.4.7

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

bito-code-review Bot commented Jun 6, 2026 •

edited

Loading

Code Review Agent Run #4d1de3

Uh oh!

codecov Bot commented Jun 6, 2026 •

edited

Loading

Uh oh!

bito-code-review Bot commented Jun 6, 2026 •

edited

Loading

Code Review Agent Run #6ab0c7

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 6, 2026

3.4.7

3.4.6

Uh oh!

bito-code-review Bot commented Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run #4d1de3

Uh oh!

codecov Bot commented Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

bito-code-review Bot commented Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run #6ab0c7

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

bito-code-review Bot commented Jun 6, 2026 •

edited

Loading

codecov Bot commented Jun 6, 2026 •

edited

Loading

bito-code-review Bot commented Jun 6, 2026 •

edited

Loading