1.0.8

[danthedeckie]

What's Changed

3 Security improvements:

• GHSA-v7m3-47hp-2wqw
• GHSA-r2q2-xmpm-7fvh
• GHSA-7g86-mgxq-vq42

fixed in:
#199

This highlights again the need to switch to allow-lists rather than deny-lists for security on simpleeval.
So the next phase is a 1.1.x stream where it's backwards compatible, BUT with deprecation warnings about any use of the system without opt in to allow-lists, and then a 2.x release where it's required.

A few other process improvements that were helpful in getting those fixes in:

• Move tests to separate files. Move tests to separate files. #177
• Upgrade to latest ruff,uv,etc, tiny cleanups Upgrade to latest ruff,uv,etc, tiny cleanups #194
• Add tox to dev for easy testing all supported python versions locally by Add tox to dev for easy testing all supported python versions locally #198

Full Changelog: 1.0.7...1.0.8

---

This discussion was created from the release 1.0.8.